Philippine Legal Context

I. Introduction

Unauthorized SIM registration under another person’s name is a serious legal issue in the Philippines. It involves the use of another person’s identity, personal information, identification documents, photograph, signature, or credentials to register a subscriber identity module, commonly called a SIM card, without that person’s consent.

The issue became especially important after the enactment of the Subscriber Identity Module Registration Act, also known as the SIM Registration Act. The law requires end-users to register SIM cards with their true and correct personal information. Its purpose is to discourage scams, cybercrime, text fraud, anonymous harassment, identity theft, terrorism-related communications, and other offenses facilitated by unregistered or falsely registered mobile numbers.

However, the same registration system can be abused. A criminal or unauthorized user may register a SIM using another person’s name, ID, photograph, or personal data. This can expose the innocent person to investigation, reputational harm, debt collection, harassment, account compromise, or suspicion in criminal activity.

The central rule is simple: a person should not register, use, sell, or cause the registration of a SIM under another person’s name without lawful authority and consent.

II. What Is SIM Registration?

SIM registration is the process by which a mobile subscriber provides identifying information to a public telecommunications entity or its authorized platform before the SIM is activated or allowed to continue service.

For an individual, registration commonly requires:

Full name;
Date of birth;
Sex;
Present or official address;
Type of government-issued ID presented;
ID number;
Photograph or selfie;
Declaration that the information is true and correct;
Other verification details required by the telecommunications provider.

For juridical entities, such as corporations, partnerships, government offices, and organizations, additional documents may be required, such as certificates of registration, board resolutions, special powers of attorney, and authorized representative documents.

The basic principle is that the registered owner or authorized user should be identifiable.

III. What Is Unauthorized SIM Registration?

Unauthorized SIM registration happens when a SIM card is registered using another person’s identity or personal data without proper consent, authority, or lawful basis.

Examples include:

Registering a SIM using another person’s name and birth date;
Uploading another person’s government ID;
Using a stolen or borrowed ID without permission;
Using another person’s selfie or photo;
Registering a SIM for a scam operation under someone else’s name;
Selling pre-registered SIM cards under identities of other people;
Using a deceased person’s identity;
Using a minor’s identity without proper authority;
Registering multiple SIMs using fake or stolen identities;
Registering a SIM through a forged authorization letter;
Using a friend’s, employee’s, relative’s, customer’s, or client’s information without consent;
Registering a SIM under a company name without company authority.

Unauthorized registration may be done by strangers, scammers, relatives, employers, employees, agents, vendors, online sellers, or even people who had temporary access to another person’s ID.

IV. Why Unauthorized SIM Registration Is Serious

Unauthorized SIM registration is serious because the registered name becomes linked to the SIM’s activity. If the SIM is later used for illegal acts, the innocent person whose identity was used may be contacted, investigated, or suspected.

The SIM may be used for:

Text scams;
Phishing links;
Fake job offers;
Loan scams;
E-wallet fraud;
Bank account takeover;
Romance scams;
Online marketplace fraud;
Harassment;
Threats;
Blackmail;
Doxxing;
Cyberlibel;
Online impersonation;
Illegal gambling operations;
Drug transactions;
Sextortion;
Human trafficking communications;
Terrorism-related activity;
Money mule coordination;
Fraudulent account verification.

Even if the registered person did nothing wrong, the false registration can create a trail pointing to them.

V. Governing Laws

Unauthorized SIM registration may implicate several Philippine laws, depending on the facts.

1. SIM Registration Act

The SIM Registration Act requires truthful registration of SIMs and penalizes false or fictitious registration, spoofing, sale or transfer of registered SIMs in prohibited circumstances, and related misconduct.

Using another person’s identity without authority may violate the law’s requirements on truthful registration and may fall under prohibited acts involving false information or fraudulent registration.

2. Data Privacy Act of 2012

The Data Privacy Act protects personal information and sensitive personal information. Unauthorized collection, use, processing, disclosure, or retention of another person’s personal data may violate data privacy rights.

A government ID, name, address, birth date, photo, and contact details are personal data. Some ID details may be sensitive personal information depending on the nature of the data.

3. Cybercrime Prevention Act of 2012

If the unauthorized registration was done online or through digital systems, and especially if it involved identity theft, computer-related fraud, illegal access, phishing, or online scams, cybercrime laws may apply.

Identity theft and computer-related fraud are common legal issues in SIM-related abuse.

4. Revised Penal Code

Depending on the acts committed, the Revised Penal Code may apply, including provisions on:

Falsification of documents;
Use of falsified documents;
Estafa or swindling;
Other deceits;
Grave threats;
Coercions;
Unjust vexation;
Slander or libel, where applicable;
Usurpation of name or authority in appropriate cases.

5. Access Devices Regulation Act

If the SIM is used to obtain or access credit cards, bank accounts, e-wallets, OTPs, online accounts, or other access devices, additional offenses may arise.

6. Anti-Financial Account Scamming Act and banking/e-money regulations

Where a SIM is used for e-wallet fraud, bank fraud, money mule activity, or account takeover, specialized laws and financial regulations may also become relevant.

7. Special laws involving threats, harassment, or gender-based online abuse

If the SIM is used for stalking, sexual harassment, image-based abuse, threats, extortion, or gender-based online abuse, other laws may apply.

VI. Is It Illegal to Register a SIM Under Another Person’s Name?

Yes, if done without authority and consent.

SIM registration must be truthful. A person who registers a SIM under another person’s name without authorization is not merely making an administrative mistake. The act may constitute false registration, identity misuse, data privacy violation, falsification, fraud, or cybercrime depending on the circumstances.

The seriousness increases if the unauthorized registrant:

Used a forged or stolen ID;
Uploaded an edited or fake document;
Used the SIM for fraud;
Sold the SIM;
Registered many SIMs;
Used another person’s identity to avoid detection;
Used the SIM to commit a crime;
Involved minors, elderly persons, employees, or vulnerable individuals;
Obtained personal data through deception or hacking.

VII. Consent Is Essential

Consent is a key issue. A person’s personal data cannot generally be used for SIM registration without that person’s knowledge and permission.

Consent must be:

Freely given;
Specific;
Informed;
Valid;
Not obtained through fraud, intimidation, or deception.

For example, if a person gives an ID to an employer for employment records, that does not automatically authorize the employer to use the ID to register SIMs. If a customer submits an ID for delivery verification, that does not authorize a courier, seller, or agent to register a SIM using the customer’s identity.

Consent for one purpose is not consent for every purpose.

VIII. Authorized Registration for Another Person

There may be legitimate cases where one person helps another register a SIM. This is not automatically illegal if properly authorized.

Examples include:

A child assisted by a parent or guardian;
An elderly person assisted by a family member;
A person with disability assisted by a representative;
A corporate employee registering SIMs for company use with written authority;
An authorized representative acting under a special power of attorney;
A telco agent assisting the actual subscriber in completing the registration.

The key is that the registration must reflect the true subscriber or lawful registered entity, and the assistant must not falsely present themselves as the owner without authority.

IX. Minors and SIM Registration

Minors may use SIMs, but registration commonly requires involvement of a parent or guardian.

An unauthorized person should not use a minor’s name, birth certificate, school ID, or other personal data to register a SIM. This can expose the minor to identity misuse and future legal or financial harm.

A parent or guardian who registers a SIM for a minor should ensure that the registration follows official requirements and that the SIM is not used for illegal activity.

X. Corporate or Business SIM Registration

SIMs used by corporations, partnerships, sole proprietorships, agencies, or organizations must be registered through authorized representatives.

Unauthorized corporate SIM registration may happen when:

An employee registers a SIM under the company name without authority;
A former employee keeps and uses a company SIM;
A reseller registers SIMs under a company using fake documents;
A staff member uses company documents to activate personal SIMs;
A person registers SIMs under a business name to conduct scams.

The company may need to investigate quickly because a SIM registered under its name can be linked to business communications, fraud, or regulatory issues.

XI. Pre-Registered SIM Cards

The sale or use of pre-registered SIM cards is legally risky and often unlawful.

A pre-registered SIM may have been registered using:

A fake identity;
A stolen identity;
A real person’s ID without consent;
A deceased person’s identity;
A minor’s identity;
A fabricated document;
A corporate identity without authorization.

Buying a pre-registered SIM can expose the buyer to legal risk, especially if the buyer knows or should know that the SIM is registered under someone else’s name. It also defeats the purpose of the SIM Registration Act.

XII. Use of Fake IDs or Edited IDs

Using fake or altered identification documents for SIM registration may give rise to criminal liability.

Examples include:

Editing the name or birth date on an ID;
Uploading a fake government ID;
Using a real ID with a substituted photo;
Using another person’s ID and claiming to be that person;
Generating synthetic identity documents;
Using AI-generated photos or edited selfies;
Forging authorization documents.

These acts may involve falsification, use of falsified documents, identity theft, data privacy violations, and SIM registration offenses.

XIII. Identity Theft and SIM Registration

Unauthorized SIM registration is often a form of identity theft.

Identity theft occurs when a person uses another’s identifying information without authority, usually to obtain a benefit, commit fraud, hide identity, or cause harm.

In the SIM context, identity theft may involve:

Name;
Address;
Birthday;
ID number;
Photograph;
Signature;
Contact details;
Biometric-like verification image;
Digital credentials;
Government account details.

A victim may not discover the misuse until they receive a notice, law enforcement inquiry, telco message, debt collection call, e-wallet complaint, or bank fraud report.

XIV. Data Privacy Issues

Personal information used for SIM registration is protected by privacy law. Unauthorized use may involve unlawful processing.

Possible privacy violations include:

Unauthorized collection of personal data;
Unauthorized use for a purpose not consented to;
Unauthorized disclosure to a telco or third party;
Malicious disclosure;
Improper storage of IDs and selfies;
Failure to protect personal data;
Use of personal data for fraud;
Use of personal data beyond the purpose for which it was collected.

Businesses, employers, lending apps, shops, recruiters, agents, and online sellers that collect IDs must protect them and cannot repurpose them for unauthorized SIM registration.

XV. Liability of the Person Who Registered the SIM

The person who registered the SIM under another’s name may face:

Criminal liability under the SIM Registration Act;
Criminal liability for falsification or use of falsified documents;
Liability for identity theft;
Liability for computer-related fraud if digital systems were used;
Liability for estafa if money or property was obtained;
Data privacy liability;
Civil liability for damages;
Administrative liability if the person is an employee, officer, agent, or professional;
Regulatory consequences if the person is connected to a telco, dealer, or business.

Liability becomes heavier if the SIM was used to commit another crime.

XVI. Liability of the Person Who Uses the SIM

The user of the SIM may be liable even if another person registered it, especially if the user knew that the SIM was falsely registered.

A person who buys, receives, possesses, or uses a SIM registered under another person’s name may be implicated if:

They knew the registration was false;
They used the SIM to conceal identity;
They used it for fraud or scams;
They participated in the registration;
They benefited from the unauthorized registration;
They ignored obvious signs that the SIM was unlawfully registered.

Good faith matters, but it must be credible. A person who knowingly buys a pre-registered SIM from an unofficial seller may have difficulty claiming innocence.

XVII. Liability of Telcos, Agents, and Sellers

Telecommunications providers and their authorized agents have duties under SIM registration rules and data privacy laws.

Potential issues include:

Failure to verify identity properly;
Allowing mass fraudulent registrations;
Poor safeguards against fake IDs;
Mishandling personal data;
Unauthorized disclosure of registration data;
Failure to deactivate suspicious SIMs after proper report;
Failure to act on identity theft complaints;
Inadequate dealer supervision;
Data breach involving registration records.

A telco is not automatically liable for every fraudulent registration, but it may face regulatory or civil consequences if negligence, weak controls, or non-compliance contributed to the harm.

XVIII. Liability of Employers

Employers may become involved in SIM registration issues in several ways.

Lawful cases

An employer may issue company SIMs to employees and register them under the company or authorized structure, following the applicable rules.

Risky or unlawful cases

Problems arise when:

An employer registers SIMs under employees’ names without consent;
An employer requires employees to lend their IDs for company SIMs without clear authority;
An employer uses former employees’ names for active SIMs;
An employer fails to transfer or deactivate SIMs after separation;
An employee uses company documents to register unauthorized SIMs;
HR records are misused for SIM registration.

Employees should not be made to carry personal legal risk for SIMs they do not control.

XIX. Liability of Lending Apps, Online Sellers, Recruiters, and Other Businesses

Many identity theft cases begin when a person submits IDs to a private party. These may include:

Online lending applications;
Job recruiters;
Online shops;
Delivery services;
Travel agencies;
Buy-and-sell transactions;
E-wallet verification assistance;
Financing companies;
Installment sellers;
Pawnshops;
Remittance centers.

If such a party uses or leaks the ID for unauthorized SIM registration, there may be data privacy, civil, administrative, and criminal consequences.

Businesses collecting IDs must have lawful purpose, proper consent, security safeguards, retention limits, and accountability.

XX. What If a Relative Registered a SIM Under Your Name?

Unauthorized registration by a relative is still legally problematic.

Common examples:

A sibling uses your ID to register a SIM;
A spouse registers a SIM under your name for personal use;
A parent registers many SIMs under a child’s name;
A cousin borrows your ID and registers a number;
A partner registers a SIM under your name to avoid detection.

Family relationship does not automatically create legal authority. Consent and lawful purpose are still required.

However, in practice, the victim may choose between administrative correction, private settlement, formal complaint, or criminal action depending on the seriousness of the misuse.

XXI. What If You Previously Gave Permission?

Consent may be limited or revocable depending on circumstances.

If you gave permission for someone to register one SIM for a specific purpose, that does not authorize them to register multiple SIMs, sell the SIM, use it for fraud, or continue using it after permission was withdrawn.

Important questions include:

What exactly did you consent to?
Was the consent written or verbal?
Was the SIM for your use or someone else’s use?
Did the person misrepresent the purpose?
Did the person exceed the authority given?
Was the SIM later transferred without proper procedure?
Was consent withdrawn?

A person who exceeds the scope of consent may still be liable.

XXII. What If You Lent Your ID?

Lending an ID can create risk. If you voluntarily allowed another person to copy or photograph your ID, you may have difficulty proving lack of knowledge unless the facts are clear.

However, lending an ID for one purpose does not authorize misuse for another purpose. For example:

Lending an ID for building entry does not authorize SIM registration;
Giving an ID to a recruiter does not authorize SIM registration;
Sending an ID to verify a purchase does not authorize SIM registration;
Giving a photocopy to a landlord does not authorize SIM registration.

The victim should document the original purpose for which the ID was shared.

XXIII. What If the SIM Was Registered Before You Knew About It?

A victim who discovers unauthorized registration should act promptly.

Delay may create suspicion or allow more harm to occur. Immediate reporting helps show that the victim did not authorize or benefit from the SIM.

Recommended actions include:

Take screenshots or preserve notices showing the unauthorized number.
Contact the telco and report identity misuse.
Request deactivation, investigation, or correction.
File a police or cybercrime report if the SIM was used for fraud or threats.
Notify banks, e-wallets, and accounts if personal data may be compromised.
File a complaint with the National Privacy Commission if personal data misuse is involved.
Execute an affidavit of denial or non-ownership if needed.
Keep all reference numbers and written communications.

XXIV. How to Know If a SIM Is Registered Under Your Name

A person may discover unauthorized SIM registration through:

Telco notification;
Account verification message;
Complaint from a victim of scam;
Law enforcement inquiry;
NBI or police contact;
E-wallet investigation;
Bank fraud alert;
Debt collection call;
SIM registration portal indication;
Discovery that a mobile number is linked to their ID;
Notice from a company or government agency.

Some telcos may provide procedures for checking registered SIMs associated with a person’s account, subject to privacy and verification rules.

XXV. Evidence to Gather

A victim should gather as much evidence as possible.

Useful evidence includes:

The mobile number involved;
Screenshots of messages from the number;
Telco notices;
SIM registration confirmation, if available;
Proof that the victim did not possess or use the SIM;
Travel, work, or location records showing impossibility of use;
Proof of lost or stolen ID;
Prior reports of identity theft;
Copies of IDs that may have been misused;
Communications with the suspected person;
Receipts or records showing when the ID was shared;
Police blotter;
Cybercrime complaint records;
Affidavit of denial;
Telco complaint reference number;
E-wallet or bank complaint records;
Witness statements.

The goal is to show that the victim did not register, authorize, possess, control, or benefit from the SIM.

XXVI. Affidavit of Denial or Non-Ownership

An affidavit may be useful when a person is falsely linked to a SIM.

The affidavit may state:

Full identity of the affiant;
Statement that the affiant did not register the SIM;
Statement that the affiant did not authorize anyone to register it;
Statement that the affiant does not own, possess, or control the SIM;
Date of discovery;
Possible circumstances of ID compromise;
Steps taken to report the matter;
Request for investigation or deactivation;
Reservation of rights against responsible persons.

An affidavit does not automatically resolve the issue, but it helps create a formal record.

XXVII. Reporting to the Telecommunications Provider

The telco is usually the first practical point of contact.

The victim may request:

Verification whether a number is registered under their name;
Deactivation of unauthorized SIM;
Correction of registration records;
Investigation of fraudulent registration;
Preservation of records for law enforcement;
Reference number for the complaint;
Confirmation of action taken;
Escalation to data protection officer or fraud unit.

The telco may require identity verification before disclosing registration information because SIM registration data is sensitive.

XXVIII. Reporting to Law Enforcement

If the SIM was used for scams, threats, extortion, harassment, cybercrime, or financial fraud, the victim should consider reporting to:

The Philippine National Police Anti-Cybercrime Group;
The National Bureau of Investigation Cybercrime Division;
Local police, especially for blotter and immediate threats;
Prosecutor’s office, if filing a criminal complaint;
Other specialized agencies depending on the offense.

The complaint should include the SIM number, screenshots, transaction records, names of suspects if known, and proof that the complainant’s identity was misused.

XXIX. Reporting to the National Privacy Commission

If personal data was used without consent, the victim may consider a complaint or report to the National Privacy Commission.

Privacy issues may involve:

Unauthorized use of ID documents;
Data breach;
Failure of a company to safeguard personal information;
Unauthorized disclosure;
Unlawful processing;
Identity misuse;
Failure to act on data subject rights.

The victim may assert rights such as access, correction, objection, erasure or blocking, and damages where appropriate.

XXX. Reporting to Banks, E-Wallets, and Online Platforms

If the unauthorized SIM is linked to financial accounts, immediate action is necessary.

The victim should notify:

Banks;
E-wallet providers;
Online marketplaces;
Social media platforms;
Email providers;
Payment apps;
Lending apps;
Delivery or ride-hailing accounts;
Government portals, if affected.

The victim should change passwords, enable stronger authentication, review account recovery numbers, and check for unauthorized transactions.

XXXI. SIM Registration and OTP Fraud

A registered SIM may be used to receive one-time passwords or account verification codes.

Unauthorized SIM registration can support:

Account takeover;
E-wallet creation;
Fake bank account verification;
Social media takeover;
Loan app registration;
Online marketplace scams;
Cryptocurrency account fraud;
Government portal misuse.

If a victim’s identity is used to register a SIM, the number may also be used to open accounts under the victim’s name. The victim should check whether related financial or digital accounts were created.

XXXII. SIM Swap Versus Unauthorized SIM Registration

Unauthorized SIM registration should be distinguished from SIM swap fraud.

Unauthorized SIM registration

A new or existing SIM is registered using another person’s identity without consent.

SIM swap fraud

A fraudster takes over a victim’s existing mobile number by causing the telco to issue a replacement SIM or eSIM.

Both involve identity misuse, but the mechanisms differ. SIM swap fraud usually targets the victim’s real number and account access. Unauthorized registration may involve a different number falsely placed under the victim’s identity.

XXXIII. Use of Deceased Persons’ Identities

Registering a SIM under a deceased person’s name is highly suspicious and may be unlawful.

It may be done to:

Avoid detection;
Commit scams;
Preserve access to accounts;
Impersonate the deceased;
Defraud heirs or relatives;
Continue receiving OTPs or benefits;
Mislead investigators.

Heirs or relatives who discover this should report it to the telco and relevant authorities, especially if the SIM is being used to access financial accounts or estate-related matters.

XXXIV. Use of Employees’ Identities

An employer or manager should not register company-controlled SIMs under employees’ personal names without informed consent and proper arrangements.

Risks to employees include:

Being linked to company communications they do not control;
Being blamed for scam messages;
Receiving law enforcement inquiries;
Being responsible for unpaid postpaid bills;
Loss of control after resignation;
Privacy violations.

A company should register business SIMs under the company or ensure written authority, proper custody, and clear turnover procedures.

XXXV. Use of Customers’ Identities

A business that collects customer IDs must not use them for SIM registration.

For example, a person who submits an ID for:

Hotel check-in;
Loan application;
Pawnshop transaction;
Delivery verification;
Online purchase;
Rental agreement;
Employment application;
School enrollment;
Event registration;

does not thereby authorize SIM registration.

Misuse of customer IDs may create civil, criminal, and administrative liability.

XXXVI. Civil Liability and Damages

A victim may have civil claims if unauthorized SIM registration causes harm.

Possible damages include:

Actual damages for financial loss;
Moral damages for anxiety, humiliation, or reputational harm;
Exemplary damages in serious cases;
Attorney’s fees and litigation expenses;
Damages under data privacy law;
Compensation for losses caused by fraud.

Civil liability may be pursued against the person who registered the SIM, the person who used it, or other responsible parties depending on evidence.

XXXVII. Criminal Liability

Criminal liability depends on the specific acts.

Possible offenses include:

False SIM registration;
Use of fictitious identity;
Use of another person’s identity;
Sale or transfer of registered SIM in violation of law;
Identity theft;
Computer-related fraud;
Estafa;
Falsification;
Use of falsified documents;
Illegal access;
Cyberlibel, if defamatory content was sent;
Grave threats or coercion, if threats were made;
Unjust vexation or harassment-related offenses;
Data privacy offenses;
Money laundering-related offenses if financial crime is involved.

Each offense has its own elements. Evidence must connect the suspect to the registration, possession, use, or criminal activity.

XXXVIII. Administrative and Regulatory Consequences

Apart from criminal and civil liability, administrative consequences may arise.

For individuals:

Employment discipline;
Loss of professional license in serious cases;
School discipline;
Termination of agency or dealership relationship;
Blacklisting by telco or platform.

For businesses:

Regulatory investigation;
Data privacy compliance orders;
Fines or penalties;
Suspension of accreditation;
Loss of telco dealership;
Civil suits;
Reputational damage.

XXXIX. Defense: Lack of Knowledge

A person falsely linked to a SIM may defend by proving lack of knowledge, consent, possession, control, or benefit.

Helpful facts include:

The person never owned the SIM;
The number is unknown to the person;
The person never received the SIM card;
The person did not upload the ID;
The ID was stolen or misused;
The person was outside the area when used;
The person immediately reported the issue upon discovery;
The person did not receive proceeds of any fraud;
The person’s devices do not contain the SIM or related messages;
The person did not communicate with victims.

The defense should be supported by records, not mere denial.

XL. Defense: Consent Was Given

A suspect may claim that the registered person consented. This defense depends on evidence.

Questions include:

Was consent written?
What exactly was authorized?
Was the person informed?
Was the consent specific to SIM registration?
Was consent obtained through deception?
Did the suspect exceed the consent?
Was the SIM later used for another purpose?
Was there a valid agency relationship?
Was the consent withdrawn?

General permission to “help with registration” is not permission to misuse the SIM.

XLI. Defense: Mistake or Clerical Error

Some cases may involve honest mistakes, such as:

Typographical error in name;
Wrong ID number uploaded;
Confusion between family members;
Telco encoding error;
Duplicate account issue;
Similar names;
Agent mistake.

If truly accidental, the proper remedy may be correction rather than criminal prosecution. However, repeated or suspicious mistakes may suggest fraud.

XLII. Burden of Proof

In criminal cases, guilt must be proven beyond reasonable doubt. The mere fact that a SIM is registered under a person’s name does not automatically prove that the person used it for illegal activity.

Investigators must determine:

Who physically possessed the SIM;
Who registered it;
What device was used;
What IP address or platform was involved;
What ID was uploaded;
Where the SIM was activated;
Who paid for the SIM or load;
Who received proceeds of fraud;
Who communicated with victims;
Whether the registered person actually controlled the number.

For victims, the practical goal is to create a record showing lack of consent and non-use.

XLIII. Telco Records and Privacy

SIM registration records may contain sensitive information. Telcos generally cannot freely disclose another person’s registration data to anyone who asks.

Disclosure may require:

Verification of identity;
Law enforcement request;
Court order;
Subpoena;
Regulatory process;
Data subject request, where applicable;
Internal fraud investigation.

A victim may ask whether their identity was used, but the telco may limit disclosure of other details unless proper legal process is followed.

XLIV. Preservation of Evidence

Because digital evidence can disappear, victims should preserve records quickly.

Steps include:

Screenshot messages with visible number and date;
Export chat logs;
Save call logs;
Save telco reference numbers;
Keep email confirmations;
Preserve payment transaction records;
Avoid deleting suspicious messages;
Write a timeline of events;
Keep the original device if messages were received there;
Ask platforms to preserve logs;
Report promptly to authorities if fraud occurred.

A clear timeline is often critical.

XLV. What Victims Should Not Do

Victims should avoid:

Threatening the suspected offender online;
Posting accusations without evidence;
Destroying the SIM or device if it is evidence;
Paying scammers to “clear” their name;
Ignoring law enforcement notices;
Giving more IDs to suspicious persons;
Using fixers;
Buying pre-registered SIMs;
Signing admissions they do not understand;
Accepting verbal assurances without written confirmation;
Delaying reports after discovery.

XLVI. Practical Action Plan for Victims

A person whose name was used without authority should consider the following:

Identify the mobile number involved.
Determine how the issue was discovered.
Gather screenshots and documents.
Check if any ID was lost, stolen, copied, or submitted to a suspicious party.
Contact the telco and file an identity misuse report.
Request deactivation, correction, or investigation.
Secure a complaint reference number.
File a police blotter or cybercrime report if the SIM was used unlawfully.
Notify banks, e-wallets, and platforms if account risk exists.
Execute an affidavit of denial if necessary.
File a data privacy complaint if personal data was misused.
Monitor for further identity theft.
Consult counsel if there is a criminal investigation, financial loss, or serious reputational harm.

XLVII. Practical Action Plan for Accused Persons

A person accused of using another’s identity for SIM registration should:

Avoid destroying evidence;
Preserve devices, messages, receipts, and registration records;
Determine whether there was consent or authority;
Identify who actually registered and used the SIM;
Secure written communications showing authority, if any;
Avoid contacting complainants in a threatening manner;
Consult counsel before giving sworn statements;
Cooperate lawfully with investigation;
Correct any unauthorized registration immediately if a mistake occurred.

If the accusation is false, the person should gather proof of non-involvement.

XLVIII. Practical Action Plan for Businesses

Businesses should:

Collect only necessary IDs;
State the purpose of collection clearly;
Prohibit staff from using customer or employee IDs for SIM registration;
Limit access to ID files;
Watermark ID copies where appropriate;
Maintain logs of who accessed documents;
Train employees on data privacy;
Secure storage systems;
Dispose of old ID copies properly;
Investigate suspected misuse immediately;
Notify affected persons and authorities when required;
Register business SIMs through proper company authority;
Recover or deactivate company SIMs from former employees.

XLIX. Preventive Measures for Individuals

Individuals can reduce risk by:

Avoiding unnecessary sharing of ID copies;
Watermarking ID copies with the purpose and date;
Sending IDs only through trusted channels;
Covering non-essential ID details where acceptable;
Reporting lost IDs immediately;
Avoiding public posting of IDs or selfies;
Not allowing strangers to “assist” with SIM registration;
Not buying pre-registered SIMs;
Regularly checking mobile accounts and e-wallets;
Using strong passwords and two-factor authentication;
Keeping a record of where IDs were submitted.

A watermark may say, for example: “For [specific purpose] only, submitted to [recipient], on [date].”

L. Watermarking IDs

Watermarking an ID copy is a practical privacy measure. It does not guarantee prevention, but it can deter misuse and help prove that the ID was intended for a limited purpose.

A good watermark should include:

Purpose;
Recipient;
Date;
Statement such as “Not valid for SIM registration” if applicable.

Example:

“For apartment lease verification only — submitted to ABC Realty — 26 May 2026 — Not for SIM registration.”

The watermark should not cover essential details required for the legitimate transaction, but it should be visible enough to discourage repurposing.

LI. If a SIM Was Used for Scam Messages

If a SIM registered under your name was used for scam messages, you should act quickly.

Recommended steps:

Report to the telco;
File a cybercrime complaint;
Execute an affidavit of non-ownership and non-use;
Preserve all messages and complaints received;
Ask victims to preserve transaction records;
Notify financial institutions if your identity was also used for accounts;
Request deactivation of the SIM;
Monitor for additional reports.

The victim of identity misuse and the victim of the scam may both need to cooperate with authorities.

LII. If the SIM Was Used for Threats or Harassment

If the SIM was used to threaten or harass someone, the registered person may be contacted by authorities. The registered person should not ignore the matter.

Immediate steps include:

Explain that the SIM was not authorized;
Provide evidence of non-use;
File an identity theft report;
Request telco investigation;
Preserve proof of whereabouts or device records;
Consult counsel before signing statements;
Avoid directly confronting the actual user if safety is at risk.

The complainant should preserve threat messages, call logs, recordings where lawful, and screenshots.

LIII. If the SIM Was Linked to an E-Wallet

If a falsely registered SIM is linked to an e-wallet, financial fraud risk is high.

The person whose identity was used should:

Report to the e-wallet provider;
Ask whether any account was opened using their personal data;
Request freezing of suspicious accounts where appropriate;
Report unauthorized transactions;
Change passwords on related accounts;
Review bank links;
File a cybercrime report;
Preserve all reference numbers.

The SIM may have been used to receive OTPs or create accounts under the victim’s identity.

LIV. If the SIM Was Used for Online Lending Apps

Unauthorized SIM registration may be connected to online lending app abuse.

Possible situations include:

A loan was applied for using the victim’s name;
Contacts were harvested and harassed;
A SIM under the victim’s name was used to borrow money;
A fraudster used the victim’s ID to pass verification;
Debt collectors contacted the victim for a loan they did not obtain.

The victim should dispute the loan, request proof of application, file identity theft reports, and report abusive collection practices where appropriate.

LV. Interaction With Defamation and False Accusations

A victim should be careful when publicly accusing someone of unauthorized SIM registration. If the accusation is not yet proven, public posts may expose the accuser to defamation or cyberlibel claims.

Safer actions include:

Filing formal reports;
Communicating privately with the telco or authorities;
Keeping statements factual;
Avoiding insults or threats;
Saying “I discovered possible unauthorized use of my identity” rather than making unsupported accusations.

Legal remedies should be pursued through proper channels.

LVI. Can a Victim Demand Deactivation?

A victim may request deactivation or blocking of a SIM falsely registered under their name. The telco will likely require verification and investigation.

Deactivation is especially important if:

The SIM is being used for fraud;
The victim does not possess the SIM;
The victim did not authorize registration;
The SIM is linked to financial accounts;
The SIM is being used for harassment or threats.

The victim should ask for written confirmation or a reference number.

LVII. Can a Victim Demand the Identity of the Actual User?

A victim may want to know who actually used the SIM. However, telcos may not freely disclose user information without legal process, especially if it involves privacy rights of other persons or law enforcement-sensitive information.

The victim may need:

Police or NBI assistance;
A subpoena;
A court order;
A prosecutor’s investigation;
Regulatory process;
Telco fraud investigation.

The victim can request preservation and investigation even if full disclosure is not immediately given.

LVIII. Can a Victim Sue the Telco?

A victim may consider legal action against a telco if there is evidence that the telco failed to comply with verification, privacy, or complaint-handling obligations.

Possible grounds may include:

Negligent acceptance of false registration;
Failure to act on a proper complaint;
Data privacy violation;
Unauthorized processing;
Failure to secure personal information;
Failure to correct or block false data;
Allowing continued use despite notice.

However, liability depends on proof. The telco may argue that it relied on submitted documents and followed required procedures. The strength of the case depends on the facts.

LIX. Can a Victim Sue the Person Who Misused the Identity?

Yes, if the person can be identified and evidence supports the claim.

Possible remedies include:

Criminal complaint;
Civil action for damages;
Data privacy complaint;
Protection orders in harassment or abuse cases;
Injunctive relief in appropriate cases;
Demand to stop using the identity and SIM.

Evidence should link the person to the registration or use of the SIM.

LX. SIM Registration and Law Enforcement Investigations

A SIM registered under a person’s name may be used as an investigative lead, but it should not be treated as conclusive proof of guilt.

Investigators should verify:

Actual possession;
Device IMEI logs;
Cell site data, where lawfully available;
Registration metadata;
IP addresses used during registration;
Payment or loading records;
Linked e-wallets;
Chat account ownership;
CCTV at point of sale, if available;
Delivery records;
Digital wallet cash-in/cash-out records;
Beneficiary accounts of fraud proceeds.

An innocent registrant by identity theft should cooperate carefully and preserve defenses.

LXI. SIM Registration and Search Warrants

In serious cases, law enforcement may seek warrants or orders involving devices, accounts, or records. A person falsely linked to a SIM should get legal assistance if served with legal process.

The person should:

Read the warrant or order carefully;
Not obstruct lawful enforcement;
Not destroy evidence;
Ask for counsel;
Keep copies of documents served;
Explain identity misuse through counsel or sworn statement.

LXII. SIM Registration and Cybercrime Evidence

Digital evidence is technical. It may include:

Registration timestamps;
IP addresses;
Device identifiers;
Login records;
SIM activation records;
Cell tower connections;
SMS logs;
Call detail records;
E-wallet KYC records;
App account logs;
Email addresses used;
Payment trails.

A proper investigation should connect the digital trail to the actual actor, not merely the name appearing on the registration.

LXIII. Data Subject Rights

A person whose data was used may assert privacy rights, including:

Right to be informed;
Right to object;
Right to access;
Right to rectification;
Right to erasure or blocking;
Right to damages;
Right to file a complaint;
Right to data portability in appropriate situations.

These rights may be asserted against entities processing personal data, such as telcos or businesses that collected the ID.

LXIV. Special Concern: Mass Registration and Scam Operations

Unauthorized SIM registration may be part of organized scam operations. Criminal groups may collect identities through:

Fake job postings;
Fake loan applications;
Phishing pages;
Online raffles;
Fake government aid forms;
Buy-and-sell transactions;
Data leaks;
Compromised business databases;
Illegal purchase of ID photos;
Recruitment of people to lend identities.

Mass registration magnifies harm because one victim’s identity may be used for many SIMs.

LXV. Special Concern: SIM Registration Assistance Booths

Some people may seek help from registration booths, stores, or agents. Risks arise if the assistant:

Keeps copies of IDs;
Registers extra SIMs;
Uses the person’s selfie for another registration;
Enters wrong information;
Submits data without explaining terms;
Fails to secure the device used;
Registers the SIM under the assistant’s control.

A person should only use trusted official channels and should not leave ID copies or selfies with unauthorized agents.

LXVI. Special Concern: Lost or Stolen IDs

If an ID is lost or stolen, it may be used for SIM registration. The owner should:

File a police blotter or loss report;
Notify the issuing agency if needed;
Monitor accounts;
Be cautious of verification attempts;
Report suspicious SIM registration notices;
Keep proof of the date the ID was lost.

A prior lost-ID report helps show that later unauthorized use was not consented to.

LXVII. Special Concern: Online Posting of IDs

Posting ID cards, vaccination cards, licenses, passports, school IDs, or selfies online is dangerous. Scammers may capture the images and use them for registration or account verification.

People should avoid posting:

Full ID images;
ID numbers;
Birth dates;
Address;
QR codes;
Signatures;
Selfies holding IDs;
Screenshots of documents.

Even deleted posts may have been copied.

LXVIII. Remedies When the Telco Refuses to Act

If a telco does not act on a proper complaint, the victim may:

Ask for escalation to the telco’s fraud unit;
Ask for the data protection officer;
Request a written denial or case status;
File a complaint with the appropriate regulatory agency;
File a privacy complaint if personal data rights are involved;
Seek law enforcement assistance;
Consult counsel for formal demand or legal action.

The victim should document all attempts to resolve the issue.

LXIX. Remedies When the Unauthorized User Is Unknown

Even if the user is unknown, the victim can still take protective steps:

File a telco complaint;
Request deactivation;
File a blotter or cybercrime report;
Preserve evidence;
Notify financial institutions;
Monitor accounts;
File a data privacy complaint if the source of data leak is suspected;
Request investigation through proper channels.

The purpose is to stop further misuse and create a record of non-involvement.

LXX. Remedies When the Unauthorized User Is Known

If the suspect is known, the victim may:

Demand immediate deactivation or transfer correction;
Require written explanation;
File a complaint with the telco;
File a criminal complaint;
File a civil action for damages;
File a data privacy complaint;
Seek employer, school, or professional discipline if applicable;
Preserve communications admitting use.

Direct confrontation should be avoided if there is risk of threats or destruction of evidence.

LXXI. Relationship to E-SIMs

Unauthorized registration may also involve eSIMs. An eSIM can be activated digitally and may not require a physical SIM card.

Risks include:

Remote activation;
Account takeover;
QR code misuse;
Digital delivery to fraudsters;
Harder detection by the victim;
Use in online-only scams.

The same principles apply: registration must be truthful, authorized, and compliant with law.

LXXII. Relationship to Number Portability

Mobile number portability allows transfer of a number between networks under certain rules. If a number registered under one identity is transferred or ported fraudulently, additional issues arise.

A victim should report unauthorized porting immediately because it may be connected to account takeover or SIM swap fraud.

LXXIII. Relationship to Postpaid Accounts

Unauthorized SIM registration may also involve postpaid plans. The harm may include bills, credit exposure, device financing, collection notices, and credit reputation damage.

A person whose identity was used for a postpaid account should:

Dispute the account immediately;
Request copies of application documents;
Ask for suspension of collection;
File identity theft reports;
Notify credit-related entities if applicable;
Preserve proof of non-application.

LXXIV. Relationship to Prepaid Accounts

Most SIM registration issues involve prepaid SIMs because they are easier to obtain. However, prepaid registration still creates legal consequences. The fact that no monthly bill exists does not make false registration harmless.

A prepaid SIM can still be used for scams, OTPs, harassment, and financial fraud.

LXXV. Relationship to Online Accounts

A mobile number may serve as the recovery number for:

Email accounts;
Social media accounts;
E-wallets;
Banking apps;
Shopping platforms;
Delivery apps;
Government portals;
Messaging apps.

If a SIM is falsely registered under your identity, check whether it has been used to create or recover online accounts in your name.

LXXVI. Relationship to Harassment and Doxxing

A SIM registered under another person’s name may be used to harass third parties while shifting suspicion to the innocent person. It may also be used to dox the victim by connecting their identity to offensive communications.

This can support claims for damages, protection, or criminal prosecution depending on the facts.

LXXVII. Relationship to Fake Accounts and Troll Operations

Unauthorized SIMs may be used to create fake social media accounts, messaging accounts, or coordinated disinformation networks. If the SIM is under another person’s identity, that person may be falsely linked to online misconduct.

The victim should report fake accounts and the underlying SIM misuse.

LXXVIII. Legal Significance of Possession

Possession of the SIM or device is important.

A person whose name appears in registration records may not be the actual possessor. Conversely, a person found with the SIM may be investigated even if the SIM is registered under another name.

Investigators and courts often look at:

Who had the SIM card;
Whose phone contained it;
Who knew the PIN or account passwords;
Who paid for load or plan charges;
Who used associated accounts;
Who received money or benefits;
Who communicated with contacts.

Actual control can be more important than registered name alone.

LXXIX. Legal Significance of Benefit

Another key question is who benefited.

If a SIM was used for fraud, investigators will trace:

Where the money went;
Who controlled the receiving wallet or bank account;
Who cashed out;
Who bought load;
Who communicated with the victims;
Who possessed the device.

An innocent person whose identity was used but who received no benefit has a stronger defense.

LXXX. Legal Significance of Prompt Reporting

Prompt reporting helps establish good faith.

If a person immediately reports unauthorized registration after discovery, it supports the claim that they did not authorize or benefit from the SIM.

Delay does not automatically prove guilt, but it can complicate the defense, especially if the SIM continued to be used.

LXXXI. Legal Significance of Prior ID Compromise

If a person’s ID was previously lost, stolen, leaked, or submitted to a suspicious platform, that fact may explain how the unauthorized registration occurred.

Evidence may include:

Lost ID report;
Data breach notice;
Screenshots of phishing submission;
Complaint against lending app or recruiter;
Police blotter;
Prior unauthorized transactions;
Emails showing ID submission;
Proof that the ID copy was watermarked for another purpose.

LXXXII. If the Victim Is Investigated

A victim whose identity was used may still be invited for questioning.

The person should:

Stay calm;
Bring identification;
Bring evidence of unauthorized use;
Bring telco complaint records;
Bring affidavit of denial, if available;
Avoid guessing;
Avoid signing inaccurate statements;
Ask for legal counsel if the matter is serious;
Provide a clear timeline.

An invitation for questioning is not the same as a conviction or final finding of liability.

LXXXIII. If the Victim Is Sued or Charged

If a person is formally charged because a SIM was registered under their name, legal representation is important.

Possible defense themes include:

No registration by the accused;
No possession or control;
No participation;
No criminal intent;
Identity theft;
Lack of benefit;
No connection to devices or proceeds;
Unreliable registration records;
Inadequate verification;
Alibi supported by objective records;
Prompt reporting after discovery.

The defense should be evidence-based.

LXXXIV. If the Victim Is a Public Official or Professional

Unauthorized SIM registration may cause reputational harm to public officials, lawyers, doctors, teachers, accountants, police officers, or other professionals.

Prompt documentation is important because the false link may affect employment, license, public trust, or administrative proceedings.

The person should consider:

Telco complaint;
Affidavit of denial;
Law enforcement report;
Data privacy complaint;
Public clarification drafted carefully, if needed;
Legal action for damages if harm occurs.

LXXXV. If the Victim Is a Minor

If a minor’s identity is used, the parent or guardian should act immediately.

Steps include:

Report to the telco;
Request deactivation;
File a police or cybercrime report if used unlawfully;
Check if the child’s ID or school records were compromised;
Notify school if records may have leaked;
Monitor online accounts;
Consider a data privacy complaint.

The privacy and welfare of the child should be protected.

LXXXVI. If the Victim Is Elderly or Vulnerable

Elderly persons may be targeted because they may not monitor digital accounts closely. Relatives or caregivers may misuse their IDs.

Protective steps include:

Review SIMs and accounts linked to the person;
Secure IDs;
Report unauthorized registrations;
Check bank and e-wallet activity;
Obtain assistance from trusted family or counsel;
Consider protection from abuse or exploitation where applicable.

LXXXVII. If the Victim Is an OFW

OFWs may be vulnerable because their IDs are frequently submitted for employment, travel, remittance, housing, and online transactions.

If an OFW’s identity is used, they may report through online telco channels, authorized representatives, consular assistance where appropriate, and Philippine cybercrime reporting channels.

An OFW should keep proof of location abroad, passport stamps, employment records, and travel records if these help show non-use.

LXXXVIII. If the Unauthorized Registration Was Done by a Telco Agent

If a telco agent or reseller used personal data without authority, the complaint should include:

Name or location of the store or agent;
Date of transaction;
Receipts;
CCTV request, if available;
Photos of booth or documents;
Screenshots of messages;
Witnesses;
Any proof that ID was submitted for a different purpose.

The victim may complain to the telco, regulators, law enforcement, and privacy authorities.

LXXXIX. If the Unauthorized Registration Was Done Online

Online registration may leave digital traces such as:

IP address;
Device information;
Timestamp;
Uploaded ID;
Uploaded selfie;
Email address used;
OTP verification logs;
Browser or app metadata.

The victim should ask the telco to preserve these records for investigation.

XC. If the SIM Was Registered Using a Forged Selfie

Some systems require a live selfie or photo. Fraudsters may use:

Edited photos;
Screenshots from social media;
Deepfake-like images;
Printed photos;
Stolen selfie-with-ID images;
Compromised verification files.

This may increase the seriousness of the offense and support identity theft or falsification claims.

XCI. SIM Registration and Artificial Intelligence

AI tools may be abused to create fake images, edit IDs, or generate synthetic identities. If AI-generated documents or images were used, the legal issues may include falsification, identity theft, cybercrime, and fraud.

Victims should preserve suspicious images and request technical examination where needed.

XCII. Role of Notarized Authorizations

A notarized authorization, special power of attorney, board resolution, or secretary’s certificate may be required in certain representative registrations.

However, a forged notarized document creates additional legal liability. A notarization does not cure fraud if the person did not actually sign or authorize the document.

XCIII. Transfer or Sale of a Registered SIM

A registered SIM should not be casually sold, lent, or transferred without following applicable rules.

A person who gives away a SIM registered under their name may remain linked to its later use unless the transfer is properly reported or updated. This is dangerous.

Before disposing of or transferring a SIM, the registered owner should:

Deactivate it;
Transfer registration properly, if allowed;
Remove it from accounts;
Clear linked e-wallets and apps;
Keep proof of deactivation or transfer.

XCIV. Loss or Theft of a Registered SIM

If a SIM registered under your name is lost or stolen, report it immediately. Otherwise, someone else may use it for illegal activity.

Steps include:

Contact telco for blocking or replacement;
File a report if needed;
Change passwords on accounts linked to the number;
Notify banks and e-wallets;
Monitor transactions;
Keep proof of report.

This is different from unauthorized registration, but the risks overlap.

XCV. SIMs Registered by Helpers, Drivers, or Staff

Households sometimes ask helpers, drivers, or staff to buy or register SIMs. Problems arise when SIMs used by one person are registered under another person’s name.

The safest practice is for the actual user or lawful account holder to be properly registered, and for employers or household heads not to use another person’s identity merely for convenience.

XCVI. SIMs Used in Businesses but Registered Personally

Small businesses sometimes use prepaid SIMs registered under the owner, employee, or family member. If the SIM is used for business transactions, complaints may later be directed at the registered individual.

Businesses should maintain clear records of:

Who owns the SIM;
Who uses it;
What accounts are linked;
Who has custody;
What happens when an employee leaves;
Whether the registration is updated or deactivated.

XCVII. Legal Risk of Allowing Someone to Use Your Registered SIM

Even if the registration is not unauthorized, allowing another person to use your registered SIM can create risk.

If the user commits fraud or sends threats, your name may appear first in records. You may later need to prove that someone else had possession and control.

Avoid lending registered SIMs, especially to people you do not fully trust.

XCVIII. Legal Risk of Registering a SIM for Someone Else

Registering a SIM in your name for another person’s use is risky.

Even if done as a favor, you may be linked to:

Scam complaints;
Harassment;
Illegal transactions;
Unpaid postpaid bills;
E-wallet activity;
Criminal investigations.

The better practice is for the actual user to register under their own name, unless a lawful representative arrangement applies.

XCIX. Practical Checklist Before Sharing ID for SIM Registration

Before sharing an ID, ask:

Is this an official telco channel?
Why is my ID needed?
Who will store the copy?
Will it be used only for my SIM?
Am I registering my own number?
Am I authorizing another person?
Is there a written record?
Can I watermark the ID?
Is the process secure?
Do I receive confirmation after registration?

Do not submit ID documents to suspicious links, unknown agents, or social media pages.

C. Key Legal Takeaways

Unauthorized SIM registration under another person’s name may involve identity theft, false registration, data privacy violations, falsification, cybercrime, fraud, and civil liability.

A SIM registered under a person’s name can create serious consequences even if the person never used it.

Consent must be specific and informed. Giving an ID for one purpose does not authorize SIM registration.

A person who discovers unauthorized registration should act quickly by reporting to the telco, preserving evidence, and filing appropriate complaints.

A telco registration record is an investigative lead, not automatic proof that the named person committed a crime.

The actual registrant, possessor, user, and beneficiary of the SIM activity must be identified through evidence.

Businesses must protect IDs and must not misuse customer, employee, or applicant information.

Buying, selling, or using pre-registered SIMs is legally dangerous.

A person should not register a SIM in their name for someone else’s use unless there is a lawful and properly documented reason.

CI. Conclusion

Unauthorized SIM registration under another person’s name is not a minor technical issue. In the Philippines, it can expose both the offender and the victim to serious legal consequences. The offender may face liability under SIM registration rules, privacy law, cybercrime law, falsification law, fraud law, and other statutes depending on how the SIM was obtained and used.

For the victim, the most important steps are prompt reporting, evidence preservation, account protection, and formal denial of ownership or authorization. The victim should not wait until the SIM is used for a scam, threat, or financial crime.

The controlling principle is clear: a SIM must be registered truthfully and lawfully. No person may use another person’s identity for SIM registration without valid consent or legal authority.