A loan app saying you owe money you never borrowed is not something to ignore, but it is also not something you should panic-pay. In the Philippines, a person is not automatically liable just because a collector has their name, phone number, selfie, ID, or contact list. The practical goal is to dispute the alleged loan in writing, preserve evidence, secure your accounts, and report the lender or scammer to the correct agency before the situation turns into harassment, data misuse, or a false credit record.

First: Do Not Admit, Pay, or “Settle” a Loan You Never Took

If you truly did not borrow the money, avoid saying or doing anything that can later be framed as an admission.

Do not:

Pay “just a small amount” to stop the calls.
Reply with “I will pay next week” or “give me time.”
Sign a promissory note, restructuring agreement, waiver, or settlement.
Send a new photo of your ID or selfie without knowing who is asking.
Click payment links or install APK files sent by collectors.
Delete messages, call logs, screenshots, or the app before preserving evidence.

A valid loan is still a contract. Under Article 1318 of the Civil Code, there is no contract unless there is consent, a certain object, and cause of the obligation. Article 1317 also states that no one may contract in the name of another without authority, and an unauthorized contract in another person’s name is unenforceable unless ratified. (LawPhil)

This means the key question is not simply, “Does the app have my name?” The better question is: Can the lender prove that I personally applied for the loan, consented to the terms, and received the proceeds?

Why This Happens With Loan Apps in the Philippines

When a loan app claims you owe money you never borrowed, the situation usually falls into one of these patterns:

Situation	What may have happened	Why it matters
Identity theft	Someone used your ID, selfie, SIM, email, or e-wallet details to apply	This may involve cybercrime, fraud, or data privacy violations
Wrong number or recycled number	The borrower used your phone number, or the number previously belonged to someone else	You should dispute the association and demand correction
Contact-list harassment	You are only a reference, contact, coworker, family member, or friend	A reference is not automatically a borrower or guarantor
Fake collection scam	The “loan app” is not the real lender, or the collector is inventing the debt	Treat links, payment demands, and threats as potential fraud
Unauthorized or unregistered lender	The app may be operating without proper SEC authority	Lending companies need SEC authority to operate

Under Republic Act No. 9474, or the Lending Company Regulation Act of 2007, a lending company must be a corporation and cannot conduct lending business unless it has authority to operate from the Securities and Exchange Commission. The law also penalizes persons who engage in lending business without a valid SEC authority. (Supreme Court E-Library)

Your Main Legal Rights

You Cannot Be Forced to Pay Without Proof of a Valid Loan

A collector must be able to show more than a text message saying you owe money. In a disputed online loan, useful proof usually includes:

The exact legal name of the lender, not just the app name.
SEC registration and Certificate of Authority details.
The loan application record.
The loan agreement or disclosure statement.
Proof of your consent to the terms.
Proof of disbursement to your bank, e-wallet, or other account.
The mobile number, email address, device, IP, timestamp, and KYC records used.
Copies of the ID, selfie, or documents allegedly submitted.

If the supposed application used your identity without your consent, the issue may be identity theft or fraud, not a valid debt.

Republic Act No. 10175, or the Cybercrime Prevention Act of 2012, penalizes computer-related identity theft, computer-related forgery, and computer-related fraud. Computer-related identity theft includes the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of another person’s identifying information without right. (Supreme Court E-Library)

A Reference Is Not Automatically a Guarantor

Loan apps sometimes tell relatives, friends, coworkers, or phone contacts that they are “liable” because their name appeared as a reference. That is usually wrong.

Under Article 2055 of the Civil Code, a guaranty is not presumed; it must be express and cannot extend beyond what is stipulated. A person does not become liable for another person’s loan merely because their number appears in someone’s contact list. (LawPhil)

The 2026 advisory on online lending platforms issued by the DICT, NPC, and SEC also stresses that character references and guarantors must be treated differently. A guarantor must have expressly consented to assume responsibility for the loan in case of default.

Loan Apps Cannot Use Harassment, Threats, or Public Shaming

SEC Memorandum Circular No. 18, Series of 2019 prohibits unfair debt collection practices by financing and lending companies. Prohibited acts include threats of violence or criminal means, threats to take actions that cannot legally be taken, obscenities or insults, false representations, deceptive collection methods, and contacting borrowers at unreasonable times.

The same SEC circular also treats as unfair collection practice the disclosure or publication of names and personal information of borrowers who allegedly refuse to pay, except in limited legally allowed situations. It also prohibits communicating false loan information, including failure to disclose that the debt is disputed.

The 2026 DICT-NPC-SEC advisory specifically warns against online lending platforms engaging in harassment, intimidation, public shaming, and unlawful use of personal data. It states that contacting persons in the borrower’s contact list other than guarantors is prohibited for debt collection purposes.

Your Personal Data Cannot Be Used Freely

The Data Privacy Act of 2012, Republic Act No. 10173, gives data subjects rights over their personal information, including the right to be informed, access personal data, dispute inaccuracies, request correction, and seek blocking, removal, or destruction of personal information that is false, unlawfully obtained, used for unauthorized purposes, or no longer necessary. (National Privacy Commission)

The National Privacy Commission has also stated that online lenders are prohibited from harvesting phone contacts and social media contact lists for harassment or collection purposes. App permissions must be suitable, necessary, and not excessive. (National Privacy Commission)

Step-by-Step: What to Do If a Loan App Says You Owe Money You Never Borrowed

1. Preserve Evidence Immediately

Before blocking, uninstalling, or deleting anything, collect proof.

Save:

Screenshots of all text messages, app notifications, emails, and chat messages.
Call logs showing dates, times, numbers, and frequency.
Voice recordings, if available and legally obtained.
Screenshots of threats, insults, public posts, group chats, or messages to your contacts.
The app name, logo, download page, developer name, website, and customer service contacts.
Payment account details where they ask you to send money.
Names or aliases of collectors.
Any account number, loan number, or reference number they use.
Proof that you did not receive funds, such as bank or e-wallet transaction history.

For phone evidence, take screenshots that show the sender, date, time, and full message. For social media posts, capture the URL or profile details if visible. Do not rely only on cropped screenshots.

2. Secure Your Phone, SIM, Email, Bank, and E-Wallet Accounts

Because fake loan claims often involve identity theft, secure the accounts connected to your identity.

Do these as soon as possible:

Change passwords for email, e-wallets, banking apps, and social media.
Turn on two-factor authentication.
Check if your SIM, email, or e-wallet received OTPs you did not request.
Review app permissions on your phone, especially contacts, camera, gallery, SMS, microphone, and location.
Remove permissions from suspicious lending apps.
Report unauthorized e-wallet or bank transactions to the provider.
If your SIM or phone was lost, stolen, cloned, or compromised, report it to your telco.

Republic Act No. 12010, or the Anti-Financial Account Scamming Act, penalizes certain financial-account scams, including opening a financial account under a fictitious name or using the identity or identification documents of another. It also recognizes social engineering schemes involving deceptive use of electronic communications to obtain sensitive identifying information. (Supreme Court E-Library)

3. Ask for Written Verification of the Debt

Send a short written dispute by email, in-app support, or official customer service channel. Keep it calm and factual.

A useful message is:

I dispute this alleged loan. I did not apply for, consent to, or receive the proceeds of this loan. Please provide the complete basis for your claim, including the loan agreement, disclosure statement, application records, KYC records, proof of disbursement, account receiving the funds, and the legal name and SEC authority of the lending or financing company. Do not treat this message as an admission of liability. Please stop collection activity and third-party contact while this dispute is under verification.

Avoid long emotional explanations. The purpose is to put the lender on notice that the debt is disputed and to force the issue into documentation.

4. Verify the Lender’s Legal Identity

Do not rely on the app name alone. Many apps use brand names different from the registered corporation.

Ask for:

Registered corporate name.
SEC registration number.
Certificate of Authority number.
Business address.
Data Protection Officer or privacy contact.
Name of third-party collection agency, if any.

Under RA 9474, the SEC regulates lending companies, and no lending company may conduct business without SEC authority. (Supreme Court E-Library)

For online complaints, the SEC iMessage portal allows the public to open tickets and submit concerns. (iMessage)

5. Report Unfair Collection to the SEC

File with the SEC when the issue involves:

An online lending app or financing/lending company.
Harassment, threats, insults, shaming, or abusive collection.
Collection calls before 6:00 a.m. or after 10:00 p.m.
False claim that you owe a debt.
Contacting your relatives, employer, coworkers, or phone contacts.
Failure to disclose that the debt is disputed.
Unauthorized or unregistered lending activity.

The 2026 DICT-NPC-SEC advisory identifies the SEC Financing and Lending Companies Department as the proper agency for unfair debt collection practices and lists the SEC iMessage portal and 1-4SEC hotline for complaints.

6. File With the National Privacy Commission for Data Misuse

File with the NPC if the loan app or collector:

Used your ID, selfie, contacts, address, or workplace without lawful basis.
Contacted people in your phonebook.
Posted your photo or name online.
Sent shaming messages to your family, friends, employer, or coworkers.
Refused to correct false personal data.
Continued processing your data after you disputed the debt.
Used excessive app permissions.

The NPC’s formal complaint process requires a specific complaint format, a filled-out form, notarization, and submission in person, by courier, or by scanned email. (National Privacy Commission)

7. Report Identity Theft, Fraud, or Threats to Cybercrime Authorities

Go beyond SEC or NPC if there are threats, extortion, fake accounts, forged documents, hacking, SIM misuse, or identity theft.

Relevant agencies include:

Problem	Possible agency
Threats, cyber harassment, identity theft, fake accounts, phishing	PNP Anti-Cybercrime Group or NBI Cybercrime Division
Cybercrime coordination, preservation, and law enforcement referral	DOJ Office of Cybercrime
Unfair debt collection by lending/financing company	SEC
Contact harvesting, shaming, unauthorized data use	NPC
Unauthorized bank/e-wallet transaction	Bank, e-wallet provider, BSP-supervised institution, and law enforcement

The NBI Cybercrime Division’s citizen charter describes investigative assistance for computer-crime victims, including execution of sworn statements or submission of prepared affidavits and supporting documents. (National Bureau of Investigation)

RA 10175 also provides that the NBI and PNP are responsible for law enforcement under the Cybercrime Prevention Act and must organize cybercrime units to handle these cases. (Supreme Court E-Library)

8. Send a Data Correction and Blocking Request

If your personal data is being used to connect you to a false loan, send a privacy request to the company’s Data Protection Officer or official privacy contact.

Ask them to:

Mark the account as disputed.
Stop collection while verification is pending.
Correct any false information.
Delete or block unlawfully obtained personal data.
Stop contacting third parties.
Identify all recipients to whom your data was disclosed.
Preserve records relevant to your complaint.

Under the Data Privacy Act, a data subject may dispute inaccurate or erroneous personal information and require correction. The law also allows blocking, removal, or destruction of personal information that is false, unlawfully obtained, used for unauthorized purposes, or no longer necessary. (National Privacy Commission)

Documents to Prepare

Document or evidence	Why it helps
Valid ID	Establishes your identity when filing complaints
Screenshots and call logs	Proves harassment, threats, frequency, and dates
Written debt dispute	Shows you denied the loan and asked for verification
Bank or e-wallet statements	Helps prove you did not receive loan proceeds
App details and URLs	Identifies the lending platform or fake app
SEC details, if known	Helps SEC trace the registered company
Sworn affidavit	Often needed for NPC, NBI, PNP, or prosecutor filings
Messages sent to your contacts	Shows third-party disclosure or public shaming
Proof of being abroad or not using the account	Useful for OFWs, foreigners, or identity-theft victims
Police blotter or cybercrime report	Creates an official record of identity theft or threats

For Filipinos or foreigners abroad, affidavits and special powers of attorney for use in the Philippines may need consular notarization or apostille, depending on where the document is executed. Philippine consulates commonly notarize affidavits and documents signed before a consular officer for use in the Philippines. (Philippine Consulate LA)

What If the Loan App Threatens to Sue You?

A lender can file a collection case only if it claims a valid debt. For small money claims in the Philippines, the Supreme Court’s rules cover money owed under loan and other credit accommodations up to ₱1,000,000, with simplified procedure before first-level courts. The same rules maintain that small claims decisions are final, executory, and unappealable. (Supreme Court of the Philippines)

If you receive actual court papers, do not treat them like ordinary collection texts. A court summons has deadlines. Your defense should focus on lack of consent, identity theft, no proof of disbursement, no valid loan agreement, unauthorized processing of personal data, and any abusive or unlawful collection practice.

A text message saying “we will file a case today” is different from an actual summons from a court. Collectors often use legal-sounding threats to pressure payment. SEC rules prohibit threats to take action that cannot legally be taken and false representations or deceptive means to collect.

Common Mistakes That Make the Problem Worse

Paying to Stop the Harassment

Paying can encourage more demands and may be misused as proof that you recognized the debt. If the loan is false, dispute first and demand verification.

Sending More Personal Data to Unknown Collectors

Do not send full IDs, selfies, signatures, or specimen signatures to random numbers. If you must prove identity to a government agency or official company channel, use secure channels and consider masking unnecessary ID numbers.

Deleting the App Without Saving Evidence

Uninstalling may remove logs, messages, loan details, and permissions history. Preserve evidence first.

Ignoring Public Shaming

If collectors message your employer, relatives, or group chats, save everything. This may support SEC and NPC complaints.

Assuming a “Reference” Has Liability

A reference is not a guarantor. A guarantor must expressly consent to be bound. (LawPhil)

Fighting Back With Threats or Defamatory Posts

Stay factual. Publicly accusing named individuals without proof can create separate legal problems. Keep your dispute in writing, with agencies, platforms, and official channels.

Special Situations

If You Are an OFW or Filipino Abroad

Loan app harassment often reaches OFWs through family members in the Philippines. Save screenshots from both sides: your messages abroad and the messages received by relatives in the Philippines. If an affidavit is needed, prepare one before a Philippine embassy or consulate, or follow the apostille process in the foreign country if applicable.

If You Are a Foreigner in the Philippines

Foreigners can still file complaints with the SEC, NPC, NBI, PNP, and courts if the incident involves a Philippine lender, Philippine data processing, Philippine phone numbers, or damage suffered in the Philippines. For immigration or travel concerns, keep copies of reports showing the alleged loan is disputed and may involve identity theft.

If They Contact Your Employer

Save the message and identify who received it. Debt collectors should not shame you or disclose alleged debt information to unrelated third parties. Under SEC MC No. 18 and the 2026 advisory, improper disclosure, false communication, and contact-list collection practices can be reportable.

If the App Used Your Contact List

This is a serious data privacy issue. The NPC has stated that online lenders cannot harvest phone and social media contact lists for harassment, and the 2026 advisory reiterates that excessive contact-list processing and contacting non-guarantor contacts are prohibited. (National Privacy Commission)

Frequently Asked Questions

Can a loan app make me pay if I never borrowed money?

Not without proving a valid loan. A valid contract requires consent, object, and cause. If someone used your identity without authority, the lender must address the fraud or identity theft issue instead of simply collecting from you. (LawPhil)

What proof should I demand from the loan app?

Ask for the loan agreement, disclosure statement, KYC records, proof of application, proof of consent, proof of disbursement, receiving account details, and the lender’s SEC registration and authority. If they cannot show that you applied and received the money, their claim is weak.

Should I pay a small amount just to stop the calls?

No, not if you never borrowed the money. Payment may be treated as recognition of the debt and can encourage further collection. Dispute in writing instead.

Can they message my family, friends, or employer?

For debt collection, contacting people in your contact list other than guarantors is prohibited under the 2026 DICT-NPC-SEC advisory. Public shaming, threats, and improper disclosure of loan information may also violate SEC and data privacy rules.

Is my contact liable if I listed them as a reference?

No. A reference is not automatically liable. A guaranty must be express and cannot be presumed under Article 2055 of the Civil Code. (LawPhil)

Where do I complain about harassment by an online lending app?

For unfair debt collection, file with the SEC. For misuse of personal data or contact-list harassment, file with the NPC. For identity theft, threats, extortion, fake accounts, or cyber fraud, report to the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or DOJ Office of Cybercrime.

What if the loan app is not SEC-registered?

Report it to the SEC. Under RA 9474, a lending company cannot conduct business without SEC authority, and unauthorized lending activity may be penalized. (Supreme Court E-Library)

Can I file a complaint even if I am abroad?

Yes. You can preserve evidence, send written disputes, and submit complaints through available online or email channels where accepted. If a notarized affidavit is required, you may need consular notarization or apostille depending on where the document is executed.

Can the loan app post my photo online?

Using your photo to shame, harass, or collect a disputed debt can raise SEC and data privacy issues. The NPC has specifically warned that photos taken for KYC should not be used to harass or embarrass borrowers. (National Privacy Commission)

What if I receive real court papers?

Respond within the deadline stated in the summons or court notice. A court case is different from a collector’s threat. Your evidence should show lack of consent, lack of disbursement, identity theft, false data, and prior written dispute.

Key Takeaways

Do not pay or admit liability for a loan you never borrowed.
A valid loan requires proof of consent, terms, and disbursement.
A reference is not automatically a guarantor.
Save screenshots, call logs, app details, payment demands, and messages to your contacts.
Send a short written dispute and demand loan verification.
Report unfair collection to the SEC, data misuse to the NPC, and identity theft or threats to cybercrime authorities.
Loan apps and collectors cannot use threats, public shaming, false representations, or contact-list harassment.
If actual court papers arrive, treat them seriously and answer based on lack of consent, identity theft, and absence of proof.