In the burgeoning landscape of Philippine fintech and digital lending, two specters frequently haunt both consumers and legal practitioners: the unsigned demand letter and the ghost account. While they may seem like mere administrative hiccups, they represent significant legal battlegrounds involving the Civil Code, the Cybercrime Prevention Act, and the Data Privacy Act.

I. The Unsigned Demand Letter: Formalism vs. Substance

A common misconception is that a demand letter without a wet-ink signature is a "scrap of paper" with no legal weight. In the Philippine jurisdiction, the reality is more nuanced.

1. The Purpose of a Demand

Under Article 1169 of the Civil Code, "those obliged to deliver or to do something incur in delay from the time the obligee judicially or extrajudicially demands from them the fulfillment of their obligation."

The law does not strictly prescribe a specific format for an extrajudicial demand. Its primary function is to:

Notify the debtor of the existence of the debt.
Explicitly demand payment/performance.
Place the debtor in legal delay (mora), which triggers the running of interest and shifts the risk of loss.

2. Is the Signature Fatal?

Technically, no. An unsigned demand letter is not automatically void. If the recipient knows who the sender is and the demand is clear, the purpose of "putting the debtor in delay" is arguably met.

However, the signature is vital for authentication. Under the Rules of Court, specifically the rules on Electronic Evidence or Private Documents, an unsigned letter is a "private document" that requires authentication before it can be admitted in evidence. Without a signature or a digital certificate, the sender may struggle to prove:

The authenticity of the document.
That the document actually originated from the purported creditor.

Legal Nuance: If the demand is sent via email or an app notification, the Electronic Evidence Act (RA 8792) applies. Here, functional equivalents of signatures (like unique identifiers or secure logins) replace the traditional pen-and-ink requirement.

II. The Anatomy of "Ghost Accounts"

A "Ghost Account" refers to a credit or bank account created using stolen, forged, or synthesized identities. In the Philippines, these are rampant in "salary loan" schemes and digital wallet platforms.

1. Modes of Creation

Identity Theft: Using a victim's actual ID and data.
Synthetic Identity: Mixing real and fake data (e.g., a real SSS number with a fake name).
Mule Accounts: Real accounts rented out by the owner to criminals.

2. The Liability Matrix

When a demand letter (signed or otherwise) arrives for a debt you never contracted, the question of liability arises.

Party	Basis of Liability	Potential Penalties
The Fraudster	Identity Theft, Falsification, Estafa	Imprisonment under RA 10175 and the RPC
The Financial Institution	Negligence in KYC (Know Your Customer)	Administrative fines from the BSP/SEC; Civil damages
The "Ghost" (Victim)	None (provided no negligence)	Entitled to clearing of credit record and damages

III. Legal Frameworks for Defense and Prosecution

1. The Cybercrime Prevention Act (RA 10175)

The creation of a ghost account constitutes Computer-related Identity Theft. Section 4(b)(3) penalizes the intentional acquisition, use, or transfer of identifying information belonging to another without right.

2. The Data Privacy Act (RA 10173)

If a lender issues a demand letter for a ghost account, they are processing the victim's data without a valid legal basis.

Unauthorized Processing: Lenders can be held liable if they failed to verify the identity of the person opening the account.
Security Breaches: If the ghost account was created due to a leak in the lender’s database, the lender faces severe administrative penalties.

3. The "Doctrine of Negligence" for Lenders

The Supreme Court has often held banks to the "highest degree of diligence." While this traditionally applied to commercial banks, the principle is expanding toward fintech. If a lender’s KYC process is so flimsy that a "ghost" can pass through, the lender bears the loss—not the person whose identity was stolen.

IV. Strategic Responses to "Ghost" Demands

If you receive an unsigned (or even a signed) demand letter for an account you did not open:

Deny and Demand Proof: Reply formally (a "Notice of Denial of Account"). Demand the "Original Application Form" and "Proof of Identity" used to open the account.
Report to the NPC: If the lender continues to harass you for a debt that isn't yours, file a complaint with the National Privacy Commission (NPC) for unauthorized processing and harassment.
Affidavit of Denial: Execute a formal affidavit stating you have no connection to the account. This serves as a "pre-emptive strike" should the lender file a collection case.
BSP Consumer Affairs: For banks and regulated e-wallets, involve the Bangko Sentral ng Pilipinas (BSP). They have a robust mechanism for handling "fraudulent account" complaints.

Summary Table: Validity vs. Liability

Issue	Legal Status	Key Takeaway
Unsigned Letter	Substantively Valid	It puts you in delay, but is an evidentiary nightmare for the creditor.
Ghost Account	Void Ab Initio	A contract requires "consent." A ghost cannot give consent; therefore, no contract exists.
Harassment	Illegal	SEC Memo Circular No. 18 (2019) prohibits unfair debt collection practices, regardless of debt validity.

In the Philippines, while the law is catching up with digital fraud, the burden often falls on the individual to "prove a negative"—that they did not open the account. However, with the interplay of the Data Privacy Act and Cybercrime laws, the "ghosts" are increasingly being forced back into the light, and the lenders who allowed them to exist are being held to account for their lack of due diligence.