When an online lending company says you owe money for a loan you never applied for, treat it as urgent but do not panic. The safest response is to dispute the debt in writing, preserve evidence, avoid making any payment or admission, verify whether the lender is registered, and report possible identity theft or data misuse to the proper Philippine agencies. In the Philippines, this situation is not just a “collection problem.” It may involve contract law, unfair debt collection, data privacy violations, cybercrime, and possible damage to your credit record.

First Things First: Do You Legally Owe a Loan You Never Took?

A loan is a contract. Under Article 1318 of the Civil Code, there is no valid contract unless there is consent, a certain object, and a lawful cause. For a loan, this means there must be proof that you agreed to borrow money, that the lender released money or credit to you, and that the terms of repayment were established. The Supreme Court has repeatedly recognized these basic requisites of a contract, including consent as a meeting of the offer and acceptance. (Lawphil)

So if you never applied, never accepted the loan, never received the proceeds, and your identity was used without authority, your position is simple: you are disputing the existence and validity of the debt.

This matters because collectors often pressure people into paying “just to stop the harassment.” Payment can later be twisted into an implied admission that the loan existed. If the claim is false, your first response should be evidence-based, calm, and written.

Why This Happens With Online Lending Apps

False loan claims usually fall into one of these scenarios:

Situation	What may have happened
Identity theft	Someone used your name, ID, phone number, selfie, or e-wallet details to apply
Contact-list harassment	You were not the borrower, but your number was harvested from someone else’s phone
Mistaken identity	The collector matched your number or name to the wrong account
Fake collector scam	A person pretending to represent a lender is trying to scare you into paying
Unauthorized app processing	An app accessed contacts, photos, or personal data beyond what was necessary
Data leak or misuse	Your personal data was obtained from a prior transaction, leak, or third party

Online lenders often rely on app-based onboarding, screenshots, selfies, automated credit scoring, e-wallet disbursements, and phone-based collections. That speed is convenient when the loan is real, but dangerous when someone else uses your identity.

Your Key Rights Under Philippine Law

A lender must prove the loan, not just demand payment

A legitimate lender should be able to show:

The loan application or contract
Your consent or electronic signature
The disclosure statement showing the loan amount, interest, fees, penalties, and payment schedule
Proof of disbursement to an account you control
The identity verification documents used
The name and authority of the collecting entity
The SEC registration and Certificate of Authority, if it is a lending or financing company

Republic Act No. 3765, the Truth in Lending Act, requires disclosure of finance charges in credit transactions so borrowers understand the true cost of credit. (Lawphil) If the company cannot show a loan contract, a disclosure statement, and proof that you received the money, its demand is weak.

Lending companies must be authorized by the SEC

Republic Act No. 9474, the Lending Company Regulation Act of 2007, regulates lending companies and requires them to operate under SEC authority. (Lawphil) Financing companies are separately regulated under Republic Act No. 8556, the Financing Company Act of 1998. (Lawphil)

The SEC maintains pages for lending and financing companies, including lists of lending companies, recorded online lending platforms, and revoked or suspended lending companies. (Securities and Exchange Commission) A company’s SEC incorporation is not always enough; for lending operations, the relevant question is whether it has authority to operate as a lending or financing company and whether its online lending platform is recorded.

Financial consumers have rights against unfair and abusive practices

Republic Act No. 11765, the Financial Products and Services Consumer Protection Act of 2022, protects financial consumers and applies to financial products and services offered or marketed by financial service providers. It recognizes consumer rights such as fair treatment, disclosure and transparency, protection against fraud and misuse, data privacy, and timely redress. (Supreme Court E-Library)

If a company insists on payment for a loan you never took, refuses to provide proof, or uses intimidation instead of verification, the issue may go beyond ordinary collection.

Collectors cannot harass, shame, or threaten you

SEC Memorandum Circular No. 18, Series of 2019 prohibits unfair debt collection practices by financing companies, lending companies, and their third-party service providers. It covers abusive collection practices such as threats, acts that cannot legally be taken, and other conduct that harms a person’s reputation or property.

A collector should not:

Threaten arrest for a mere civil debt
Publicly shame you online
Tell your employer, relatives, neighbors, or contacts that you are a scammer or debtor
Use insults, profanity, or intimidation
Claim they can immediately garnish your salary or seize property without court process
Contact people who are not guarantors or co-makers
Misrepresent themselves as police, court personnel, lawyers, or government officers

A real debt is normally collected through lawful demand and, if necessary, court action. Harassment is not a shortcut.

Your personal data cannot be used freely just because an app has it

Republic Act No. 10173, the Data Privacy Act of 2012, gives data subjects rights to be informed, access their data, dispute inaccuracies, and request blocking, removal, or destruction of unlawfully obtained or unauthorized personal information. The National Privacy Commission may receive complaints, conduct investigations, order bans on processing, and recommend prosecution where appropriate. (National Privacy Commission)

NPC Circular No. 20-01, as amended by NPC Circular No. 2022-02, specifically addresses personal data processing for loan-related transactions. The amended rules prohibit unnecessary app permissions, excessive contact-list processing, and unbridled processing that leads to harassment or debt collection outside the borrower’s declared guarantors.

This is very important if the collector says, “We got your number from the borrower’s contacts,” or if they are messaging your family, co-workers, or friends.

What to Do Immediately

1. Do not pay, admit, or negotiate until the loan is verified

Do not say:

“I will pay later.”
“Give me a discount.”
“I borrowed but I forgot.”
“I will settle to stop the messages.”

Instead, say in writing:

I dispute this alleged loan. I did not apply for, consent to, receive, or benefit from this loan. Please provide proof of the alleged loan, including the signed or electronically accepted loan agreement, disclosure statement, disbursement record, KYC documents, and your authority to collect. Pending verification, stop collection and stop processing or sharing my personal data for collection purposes.

Keep the tone firm and factual. Do not insult the collector. Do not make threats. Your goal is to create a clean paper trail.

2. Preserve evidence before blocking anyone

Before you block numbers or delete the app, save:

Screenshots of text messages, chats, app notifications, emails, and social media messages
Call logs showing dates, times, and numbers
Voice recordings if legally and safely obtained
Names used by collectors
The app name, website, package name, and download page
Payment demands, QR codes, bank accounts, e-wallet numbers, or links sent to you
Messages sent to your relatives, employer, or contacts
Any posted accusations or threats online
Your own written dispute messages

For screenshots, include the phone number, date, time, and full message thread. If possible, export messages or back them up. Courts, prosecutors, the SEC, NPC, NBI, and PNP Anti-Cybercrime Group give more weight to organized evidence than to general complaints.

3. Ask for formal proof of the loan

Send a written request through the app support email, official website, or verified company email. Ask for:

Proof to request	Why it matters
Loan agreement	Shows whether there was consent
Disclosure statement	Required for transparency of loan terms
Disbursement proof	Shows where the money actually went
KYC documents	Shows what ID/selfie/account was used
IP logs/device details, if available	May show suspicious access or impersonation
Collector authority	Shows whether the collector is authorized
SEC registration and Certificate of Authority	Shows whether the lender is regulated
Data source	Shows how they obtained your personal data

Do not send a fresh copy of your ID unless you are sure you are dealing with the legitimate company through official channels. If identity theft is suspected, sending more IDs to an unknown collector can make the problem worse.

4. Verify the company and the app

Check whether the company appears in the SEC lists for lending companies, financing companies, recorded online lending platforms, and revoked or suspended entities. The SEC’s lending and financing company page contains links to these lists. (Securities and Exchange Commission)

Also check:

The exact corporate name, not just the app name
Whether the app name is listed as a recorded online lending platform
Whether the company’s Certificate of Authority is active
Whether the app has been subject to SEC advisories, revocation, suspension, or cease-and-desist orders
Whether the website or app uses a look-alike name

Many abusive collectors use app names that differ from the registered corporate name. Some fake collectors also pretend to represent a real company.

5. Secure your accounts and identity

If your identity may have been used:

Change passwords for your email, e-wallets, banking apps, and social media.
Turn on two-factor authentication.
Review GCash, Maya, bank, and credit card transaction history.
Report suspicious activity to your bank or e-wallet provider.
Check if your phone number, email, or ID was used in other accounts.
Avoid clicking links sent by collectors.
Do not install APK files or apps sent outside official app stores.
Consider replacing compromised passwords and PINs immediately.

If a Philippine mobile number is being used to threaten or defraud you, save the number. Republic Act No. 11934, the SIM Registration Act, requires SIM registration and defines spoofing as transmitting misleading source information with intent to defraud, cause harm, or wrongfully obtain value. (Supreme Court E-Library) Law enforcement may request subscriber or technical information through proper legal process.

Where to File Complaints in the Philippines

Different agencies handle different parts of the problem. You may need more than one complaint.

Problem	Where to report	What to prepare
Unregistered or abusive online lending company	SEC	Complaint form or ticket, screenshots, company/app name, loan demand, proof of harassment
Unauthorized use of personal data or contact harvesting	National Privacy Commission	Notarized complaint or complaint-assisted form, evidence, screenshots, witness affidavits if available
Identity theft, fake account, threats, hacking, fraud	PNP Anti-Cybercrime Group or NBI Cybercrime Division	Complaint-affidavit, IDs, screenshots, numbers, links, transaction details
Wrong loan appearing in credit record	Credit Information Corporation dispute process	Credit report, disputed account details, proof of identity, written dispute
Threats of physical harm	Local police, PNP ACG, or NBI	Screenshots, call logs, recordings, location details, names/numbers

The SEC has an online ticket system through SEC iMessage, which accepts reports and complaints. (Securities and Exchange Commission) For privacy complaints, the NPC explains that a formal complaint should be in the required format, notarized, and submitted in person, by courier, or by scanned email submission. (National Privacy Commission) The NBI Cybercrime Division’s citizen charter also lists investigative assistance for victims of computer crimes, with the complainant proceeding to the Cybercrime Division to file a complaint or request investigation. (National Bureau of Investigation)

For credit reporting issues, the Credit Information Corporation provides an Online Dispute Resolution System for disputes involving credit information. (Credit Information Corporation (CIC))

How to Write a Strong Dispute Letter

A good dispute letter is short, specific, and evidence-based.

Sample wording

I am formally disputing the alleged loan under account/reference number ________. I did not apply for, consent to, receive, or benefit from this loan.

Please provide within a reasonable period:

the complete loan agreement and disclosure statement;

the date and time of application;

the mobile number, email address, device, and account used;

the KYC documents submitted;

the disbursement record showing the receiving bank or e-wallet account;

proof of your SEC authority to operate and authority to collect; and

the source and purpose of your processing of my personal data.

Pending verification, cease collection, do not report or continue reporting the disputed account as my valid debt, and stop disclosing my personal data to third parties for collection purposes.

Attach only what is necessary. If you attach ID, watermark it with “For dispute of alleged loan with [Company] only” and cover sensitive details not needed for verification.

What If They Contact Your Family, Employer, or Friends?

If you are not the borrower, or if you never named anyone as guarantor, contacting random people to pressure you is a major red flag.

NPC Circular No. 2022-02 states that, for debt collection, lending or financing companies may only contact the guarantor and that contacting persons in the borrower’s contact list other than named guarantors is prohibited.

Tell your contacts:

A lending app is falsely claiming I have a loan. I am disputing it and reporting the matter. Please do not give them my personal information or pay anything on my behalf. Please send me screenshots of any messages they send you.

Ask them to save the messages, not just block the sender immediately. Their screenshots may help prove harassment, unauthorized disclosure, or unfair collection.

What If the Loan Appears on Your Credit Report?

If a false online loan is reported to the credit system, act quickly. A wrong credit record can affect bank loans, credit cards, housing applications, employment checks in finance-related roles, and future borrowing.

Practical steps:

Get a copy of your credit report through authorized channels.
Identify the reporting institution and account details.
File a written dispute with the lender and the Credit Information Corporation process.
Attach your dispute letter, proof of identity, and evidence that you did not receive the loan.
Ask that the account be marked disputed while under investigation.
Keep follow-up records.

Do not wait until you apply for a bank loan and get denied. Credit data problems are easier to fix when the disputed account is fresh.

Can They Have You Arrested?

For an ordinary unpaid loan, no one should be arrested simply because of debt. A loan dispute is generally civil in nature. A creditor must prove its claim through lawful processes.

However, criminal issues may arise if there is fraud, identity theft, falsified documents, threats, hacking, or malicious online posting. Republic Act No. 10175, the Cybercrime Prevention Act of 2012, includes computer-related fraud and computer-related identity theft, including the intentional use or misuse of identifying information belonging to another without right. (Lawphil)

If a collector threatens, “Police will arrest you today,” ask for the case number, court, prosecutor’s office, and written document. Fake arrest threats are commonly used to scare people into paying.

What If You Receive a Demand Letter or Court Papers?

Do not ignore actual legal documents.

If it is only a collection letter

Reply in writing that you dispute the debt and request proof. Keep a copy.

If it is a barangay notice

Attend if properly summoned, especially if you and the complainant are in the same city or municipality and the matter falls under barangay conciliation rules. Bring your evidence. Make it clear that you deny the loan and do not admit liability.

If it is a court summons

Read the papers carefully. Check the court, case number, plaintiff, amount claimed, and deadline. A lender that files a case must prove the loan. Your defense will usually focus on lack of consent, lack of disbursement to you, identity theft, defective documents, or wrong party.

Do not assume that a false claim will disappear just because it is false. Courts decide based on evidence and timely filings.

Special Notes for OFWs, Filipinos Abroad, and Foreigners

False online loan claims often affect OFWs because their IDs, Philippine SIMs, e-wallets, or remittance records may be misused while they are abroad.

If you are outside the Philippines:

Save screenshots showing your foreign location and time zone.
Keep travel records, work records, or immigration stamps showing you were abroad when the alleged loan was made.
If you need to execute an affidavit abroad, ask the Philippine Embassy or Consulate about notarization/acknowledgment. If using a foreign notary in an Apostille Convention country, the document may need an apostille before use in the Philippines.
Do not send your passport, residence card, or work permit to unknown collectors.
Use official agency portals and verified government emails where available.

Foreign nationals in the Philippines should be especially careful with passport and ACR I-Card copies. If a loan was allegedly opened using immigration documents, request the KYC file and disbursement proof, and report suspected misuse promptly.

Common Mistakes That Make the Problem Worse

Paying a small amount “just to stop them”

This may be treated as proof that you recognized the account. If you dispute the loan, do not pay unless and until the matter is verified and resolved.

Sending more IDs to unknown collectors

Identity thieves love “verification.” Send documents only through official, verified channels and watermark them for the specific purpose.

Deleting the app or messages too early

You may delete the very evidence needed for an SEC, NPC, NBI, PNP, or court complaint.

Arguing by phone

Phone calls create confusion and may lead to accidental admissions. Keep communications in writing.

Ignoring credit reporting

A false ₱3,000 or ₱5,000 loan can become a long-term credit problem if it is reported as unpaid.

Posting accusations online with names and photos

It is understandable to be angry, but careless public posts can create defamation or cyberlibel risks. Report through official channels and preserve evidence instead.

Documents to Prepare

Document or evidence	Purpose
Valid ID	Establishes your identity when filing complaints
Screenshots and call logs	Shows demands, threats, harassment, and dates
Dispute letter	Proves you denied the loan early
Company/app details	Helps regulators identify the respondent
SEC verification screenshots	Shows whether the company/app is registered or flagged
Bank/e-wallet statements	Helps show you did not receive proceeds
Affidavit of denial or complaint-affidavit	Useful for NPC, NBI, PNP, or court
Witness screenshots from family/employer/contacts	Supports harassment or unauthorized disclosure
Credit report	Needed if the false loan appears in credit records
Travel/work records, if abroad	Helps disprove your involvement at the relevant time

Typical Timelines and Practical Expectations

Step	Usual practical timing
Evidence gathering	Same day to 3 days
Written dispute to lender	Same day once evidence is saved
Lender response	A few days to several weeks; some do not respond properly
SEC complaint processing	Varies depending on completeness, volume, and respondent
NPC formal complaint	Can take weeks to months, especially if pleadings or hearings are required
NBI/PNP cybercrime investigation	Varies widely depending on digital evidence and traceability
Credit report dispute	Depends on the reporting institution’s response and CIC process
Court case, if filed	Months or longer, depending on court docket and procedure

The biggest bottleneck is usually incomplete evidence. A well-organized complaint with screenshots, dates, app names, account numbers, and clear narration is easier to act on than a general statement that “they are harassing me.”

Frequently Asked Questions

Can an online lending app force me to pay a loan I never took?

Not without proof. A lender must show that you consented to the loan and received the proceeds or benefit. If your identity was used without authority, dispute the debt in writing and request the loan documents, disclosure statement, KYC records, and disbursement proof.

Should I pay first and complain later?

Usually no, if you genuinely never took the loan. Paying may be treated as an admission or settlement. Preserve evidence, dispute the account, and report the matter through the proper channels.

What if they say they will post my face or message my contacts?

Save the threat immediately. Using a borrower’s photo to harass or embarrass them, or processing contact lists in a way that leads to harassment or debt collection outside guarantors, may violate NPC loan-related data processing rules and unfair collection rules.

What if I am only a contact person and not the borrower?

Tell them in writing that you are not the borrower, guarantor, or co-maker, and demand that they stop contacting you. Save all messages. If they continue, the incident may be reported to the NPC and SEC, depending on the facts.

Can a collector call my employer?

Collectors should not use your workplace to shame, pressure, or disclose private debt information. If your employer is contacted, ask for screenshots, call details, and the exact statements made. This may support a complaint for unfair collection or unauthorized disclosure.

What if the lender is not registered with the SEC?

An unregistered lending operation is a serious red flag. Save the app name, website, screenshots, and payment details, then report the matter to the SEC and, if fraud or threats are involved, to cybercrime authorities.

Can I file a police or NBI complaint for identity theft?

Yes, if someone used your personal information, ID, phone number, e-wallet, or online account to obtain a loan or create a fake account. Possible legal bases may include the Cybercrime Prevention Act, the Data Privacy Act, and relevant provisions of the Revised Penal Code depending on the facts.

What if the loan was sent to an e-wallet under my name but I never received it?

Request the full disbursement record, including date, time, receiving account, transaction reference number, and KYC used for the receiving wallet. Also report the transaction to the e-wallet provider. The key question is whether you controlled or benefited from the receiving account.

Will ignoring the messages make the problem go away?

Sometimes spam collectors stop. But if your identity was used, ignoring everything may allow the false account to be reported, escalated, or sold to another collector. At minimum, send a written dispute and preserve proof.

Can I sue the online lending company?

Depending on the evidence, possible remedies may include regulatory complaints, privacy complaints, civil action for damages, or criminal complaints for threats, identity theft, fraud, or unlawful data processing. The best first step is to document the facts clearly and identify the correct respondent.

Key Takeaways

A loan you never took should be treated as a disputed debt plus possible identity theft or data privacy incident.
Do not pay, admit, or negotiate until the lender proves the loan.
Ask for the loan agreement, disclosure statement, KYC records, disbursement proof, SEC authority, and collector authority.
Preserve screenshots, call logs, app details, payment demands, and messages sent to your contacts.
Report abusive or unauthorized online lending activity to the SEC, privacy violations to the NPC, cybercrime or identity theft to the PNP ACG or NBI, and false credit records through the CIC dispute process.
Ordinary debt does not justify threats, public shaming, contact-list harassment, or fake arrest claims.
The strongest protection is a clear written dispute, organized evidence, and prompt reporting through the proper Philippine channels.