Finding out that someone made a fake ID using your name, photo, signature, address, birthdate, passport details, driver’s license, PhilID, TIN, or other personal information is frightening because it can lead to loans, SIM cards, e-wallets, bank accounts, online scams, police reports, immigration problems, or debt collection under your name. In the Philippines, this is not just a “fake ID issue.” It can involve identity theft, falsification, cybercrime, data privacy violations, financial fraud, and civil liability. The right response is to move quickly, preserve evidence, notify the institutions involved, and create an official paper trail showing that the fake ID was made and used without your consent.

What Counts as a Fake ID Using Your Personal Information?

A fake ID can be any document, card, digital image, screenshot, PDF, QR code, profile, account record, or registration that falsely makes it appear that you are the person who applied, registered, signed, verified, or transacted.

Common examples in the Philippines include:

A fake driver’s license, passport, PhilID, company ID, school ID, PRC ID, SSS/GSIS/UMID, voter’s ID, TIN card, barangay ID, or senior citizen/PWD ID
A manipulated photo of your real ID, such as your name and ID number placed beside another person’s face
A fake e-wallet or bank KYC profile opened using your ID photo and selfie
A SIM card registered using your name and government ID
A loan application, online lending account, credit card application, or buy-now-pay-later account using your details
A fake social media profile or marketplace seller account pretending to be you
A forged authorization letter, SPA, deed, employment document, or delivery/claim document using your signature

The key issue is unauthorized use of your identity. Even if the fake ID looks crude or was only used online, it can still create legal and practical risk if it was submitted to a bank, telco, lending app, employer, government office, delivery platform, casino, real estate broker, school, landlord, or foreign authority.

Why You Should Act Quickly

Fake IDs are often used for “downstream” fraud. The person who made the ID may not stop at making the document. They may use it to:

Open financial accounts or e-wallets
Register SIM cards used for scams
Borrow money from online lending apps
Receive scam proceeds as a money mule account
Claim deliveries, remittances, government benefits, or refunds
Sell items online under your identity
Apply for work, accommodation, or entry passes
Harass others while pretending to be you
Create false records that later appear in a police, credit, immigration, or bank investigation

Your first goal is not yet to “win a case.” Your immediate goal is to separate yourself from the fake identity record by creating dated proof that you discovered the fraud, denied involvement, notified the relevant institutions, and reported the incident to the proper authorities.

Immediate Steps to Take in the First 24 to 48 Hours

1. Preserve the Evidence Before It Disappears

Do not rely on memory. Scammers delete accounts, change usernames, remove posts, and deactivate numbers.

Save the following:

Screenshots showing the fake ID, account, post, message, listing, transaction, or registration
The full URL or profile link, not just the profile name
Date and time of discovery
Phone numbers, email addresses, usernames, account names, QR codes, bank/e-wallet account numbers, reference numbers, tracking numbers, or transaction IDs
Messages from debt collectors, banks, telcos, police, victims, platforms, or buyers
Any copy of the fake ID or application form sent to you
Any proof that your real ID was previously submitted somewhere, such as a bank, employer, landlord, school, travel agency, courier, casino, lending app, or online platform

For digital evidence, keep both:

A screenshot or PDF copy for easy viewing
The original file, message, email header, or link when available

Avoid editing the evidence. If you need to redact something for sharing, keep an unedited original copy.

2. Secure the Accounts Connected to Your Identity

If the fake ID uses information from your real documents, assume your data may have leaked.

Immediately secure:

Primary email accounts
Mobile number and SIM
Banking apps
E-wallets
Social media accounts
Government portals
Cloud storage where ID scans are saved

Practical steps:

Change passwords using a device you trust
Enable multi-factor authentication
Remove unknown recovery emails or phone numbers
Check login history
Contact your telco if you suspect SIM swap, unauthorized SIM registration, or lost SIM use
Contact banks and e-wallets to flag your account for identity theft risk

Do not send more copies of your IDs through random chat messages. When an institution asks for ID, use official channels only.

3. Write a Short Incident Timeline

Prepare a simple timeline while the facts are fresh. Include:

When you first discovered the fake ID
How you discovered it
Who informed you, if anyone
What information of yours was used
Which accounts, loans, SIMs, or transactions appear connected
What steps you already took
Names of institutions contacted and ticket/reference numbers

This timeline will help when preparing a complaint-affidavit, bank dispute, NPC complaint, or prosecutor’s complaint.

4. Notify the Institution That Accepted or Displayed the Fake ID

Report the fake ID to the organization that used, accepted, displayed, processed, or relied on it.

Examples:

Situation	Report to	What to Request
Fake e-wallet or bank account	Bank/e-wallet provider	Freeze or flag account, preserve KYC records, investigate unauthorized use
Loan under your name	Lending company, financing company, bank, or collection agency	Suspend collection, provide application records, mark account as disputed
SIM registered under your name	Telco first, then NTC/DICT channels if unresolved	Deactivation, correction, investigation, proof of registration record
Fake social media or marketplace account	Platform support, cybercrime authorities if fraud occurred	Takedown, preservation of records, report reference number
Fake government ID	Issuing agency such as PSA/PhilSys, DFA, LTO, PRC, BIR, SSS, GSIS, COMELEC, LGU	Verification, record check, notation if available
Debt collectors contacting you	Original creditor/lender, not only the collector	Written confirmation that the account is disputed due to identity theft
Credit report affected	Lender and Credit Information Corporation-accredited channel	Correction, dispute annotation, removal of inaccurate data

Keep copies of all reports and replies.

5. Execute an Affidavit of Denial or Affidavit of Identity Theft

Many Philippine banks, e-wallets, lenders, telcos, and government offices will ask for a notarized affidavit.

The affidavit usually states:

Your full legal name and identifying details
That you discovered a fake ID/account/application using your information
That you did not make, authorize, sign, submit, register, transact, borrow, or benefit from it
The date and manner of discovery
The institution, account number, phone number, loan reference, profile link, or transaction involved
The actions you already took
A request for investigation, correction, blocking, cancellation, or preservation of records

Use “Affidavit of Denial” when you are denying a specific loan, account, transaction, signature, or registration. Use “Affidavit of Identity Theft” when the broader problem is misuse of your identity.

Notarial fees vary by location and complexity. In practice, simple affidavits may cost a few hundred pesos, while more detailed affidavits with annexes can cost more.

Philippine Laws That May Apply

Fake IDs using your personal information may trigger several laws at the same time. The exact charge depends on what was made, how it was made, where it was used, and whether money or digital systems were involved.

Law	When It May Apply
Revised Penal Code, Articles 171 and 172	Falsification of public, official, commercial, or private documents; use of falsified documents
Revised Penal Code, Article 315	Estafa, if the fake ID was used to defraud someone or obtain money, goods, credit, or services
Revised Penal Code, Articles 177 and 178	Usurpation of authority, using fictitious name, or concealing true name in certain situations
Cybercrime Prevention Act of 2012, RA 10175	Computer-related identity theft, computer-related forgery, cyber-enabled fraud, or crimes committed through ICT
Data Privacy Act of 2012, RA 10173	Unauthorized processing, misuse, disclosure, or failure to secure personal information
Access Devices Regulation Act, RA 8484, as amended by RA 11449	Credit card, debit card, bank account, electronic account, access device, or online banking fraud
SIM Registration Act, RA 11934	SIM registration using false information, fictitious identity, or fraudulent ID documents
Anti-Financial Account Scamming Act, RA 12010	Opening or using financial accounts under a fictitious name or another person’s identity documents, money muling, social engineering
Philippine Identification System Act, RA 11055	Misuse involving PhilSys/PhilID information or false identity-related acts connected to the National ID system
Civil Code Articles 19, 20, 21, 26, and 32	Civil damages for unlawful acts, abuse of rights, privacy violations, and impairment of protected rights

Falsification Under the Revised Penal Code

If someone makes a fake government ID, changes entries on a real ID, imitates your signature, or makes it appear that you participated in a document when you did not, the Revised Penal Code provisions on falsification may apply.

Article 171 covers falsification by public officers, employees, notaries, or ecclesiastical ministers. Article 172 covers falsification by private individuals and use of falsified documents.

A practical point: in falsification of public or official documents, Philippine jurisprudence treats the offense seriously because it injures public faith in official documents. The issue is not only whether you lost money. The false document itself can be punishable because it makes a lie appear official.

Cybercrime and Online Identity Theft

If the fake ID was created, uploaded, submitted, transmitted, or used through a computer system, app, website, email, or social media account, RA 10175 may apply.

Relevant cybercrime concepts include:

Computer-related identity theft: unauthorized acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another person.
Computer-related forgery: manipulating computer data so that fake or altered data is treated as authentic.
Cyber-enabled offenses: under RA 10175, certain crimes under the Revised Penal Code and special laws may carry higher penalties when committed through information and communications technology.

Examples:

A scammer uploads your ID and selfie to pass e-wallet KYC.
Someone edits your ID and uses it to register SIM cards online.
A fake seller account uses your name and ID to make buyers trust the account.
A loan app account is created using your ID photo, mobile number, and forged digital signature.

Data Privacy Violations

Under RA 10173, your personal information must be processed according to the principles of transparency, legitimate purpose, and proportionality. Sensitive personal information includes data such as age, marital status, health information, government-issued numbers, and other protected details.

A Data Privacy Act issue may arise when:

A company failed to secure your uploaded ID documents
A former employee, agent, broker, recruiter, lender, or staff member copied and reused your ID
An institution refuses to correct records even after proof of identity theft
Your personal information was disclosed or used without authority
A database breach exposed your ID images and details

The National Privacy Commission (NPC) is the main agency for privacy complaints. The NPC complaint process generally requires a notarized complaint or verified complaint, supporting evidence, and, in many cases, proof that you first informed the respondent in writing and gave them a chance to act. The NPC’s public guidance refers to an exhaustion of remedies requirement, commonly involving no timely or appropriate action, or no response within 15 calendar days from receipt of your written notice. The NPC provides its official complaint process on its filing formal complaints page and mechanics for complaints page.

Financial Account Scams and Money Mule Risk

RA 12010, the Anti-Financial Account Scamming Act, is especially relevant when fake IDs are used for bank accounts, e-wallets, payment accounts, or accounts receiving scam proceeds.

The law covers, among others:

Opening a financial account under a fictitious name
Using the identity or identification documents of another person
Buying, selling, borrowing, lending, or renting financial accounts
Social engineering schemes to obtain sensitive identifying information
Temporary holding of disputed funds by financial institutions under BSP rules

This matters because a fake ID may be used to create an account that receives scam money. If your name appears in the KYC record, investigators or victims may initially trace the account to you. That is why early written denial, institution reporting, and law enforcement reporting are important.

Where to Report Fake IDs in the Philippines

NBI Cybercrime Division or Regional Cybercrime Centers

For online identity theft, fake digital IDs, e-wallet fraud, online lending, fake accounts, phishing, or cyber-enabled scams, the National Bureau of Investigation may be appropriate.

The NBI’s citizen charter for computer crime complaints describes a process where complainants proceed to the Cybercrime Division, fill out complaint forms, submit sworn statements or prepared affidavits, and provide supporting documents. The NBI posts information on its investigative assistance for victims of computer crimes page.

Bring or prepare:

Valid ID
Printed screenshots and digital copies
Affidavit or draft statement
Links, usernames, numbers, and account details
Bank/e-wallet/loan/telco reference numbers
Device involved, if investigators need to examine it
Written communications from institutions or victims

PNP Anti-Cybercrime Group

The PNP Anti-Cybercrime Group is another route for cybercrime complaints. In practice, a formal complaint usually requires personal appearance or coordination with a regional anti-cybercrime unit, especially if investigators need sworn statements, device inspection, or evidence preservation requests.

You may also check the Department of Justice’s cybercrime reporting page for official cybercrime reporting guidance.

Local Police Station or Barangay

A police blotter can be useful as an early record, especially if you need proof for a bank, telco, employer, platform, or collector. However, a blotter by itself does not usually resolve identity theft.

Barangay reporting may help when the person involved is known and lives in the same community, but many fake ID cases involve offenses beyond barangay conciliation, especially falsification, cybercrime, financial fraud, or data privacy violations. Do not stop at barangay mediation if the fake ID is being used for loans, scams, SIMs, bank accounts, or government records.

National Privacy Commission

File with the NPC when the issue is misuse, breach, unauthorized disclosure, refusal to correct, or improper handling of your personal information by a personal information controller, such as a company, school, employer, platform, lender, telco, or government office.

Before filing, send a written notice to the organization involved. Ask them to:

Identify what personal data they have about you
Explain how they obtained it
Preserve records related to the fake ID
Correct or block inaccurate records
Stop processing unlawfully obtained data
Provide a written response within a specific period

If they do not act properly, prepare an NPC complaint with annexes.

BSP, Banks, E-Wallets, and Financial Institutions

If the fake ID was used for a bank, e-wallet, credit card, loan, remittance, or payment account, report first to the financial institution’s consumer assistance channel.

Ask for:

Immediate fraud tagging
Temporary hold or freezing review if funds are involved
KYC document preservation
Copy or summary of the application record, subject to lawful limitations
Suspension of collections while under fraud investigation
Written certification that the account or transaction is disputed
Correction of credit reporting, if applicable

If unresolved, you may escalate to the Bangko Sentral ng Pilipinas through the BSP Consumer Assistance Mechanism. BSP states that consumers should generally raise the issue first with the BSP-supervised financial institution, then use BSP channels such as BOB or the CIR form if unresolved. See the BSP’s consumer assistance channels.

NTC, Telcos, and DICT Channels for SIM Issues

If a SIM appears to be registered under your name without your consent, report to the telco first. Ask them to verify, deactivate, correct, or investigate the registration.

For SIM registration concerns, the National Telecommunications Commission has referred consumers to NTC’s consumer channels and DICT complaint channels. NTC public guidance has identified its 24/7 consumer hotline 1682 and DICT hotline 1326 for SIM registration-related concerns. Keep the telco ticket number and any written reply.

Credit Information Corporation and Credit Reports

If fake loans, credit cards, or financial accounts may affect your credit record, check whether inaccurate entries appear in credit reports available through the Credit Information Corporation ecosystem or accredited credit bureaus.

The CIC has an Online Dispute Resolution System for disputes involving erroneous, misleading, incomplete, or outdated credit data found in a credit report. Usually, you should also dispute directly with the lender or reporting entity because the credit registry depends on data submitted by participating institutions.

Documents You Should Prepare

Document	Why It Helps
Valid government ID	Proves your real identity
Affidavit of Denial or Identity Theft	Formal sworn denial of the fake ID, account, loan, or transaction
Police blotter or NBI/PNP complaint record	Shows you reported the incident promptly
Screenshots and printouts	Shows the fake ID, profile, account, transaction, or messages
URLs, usernames, phone numbers, email addresses	Helps trace digital evidence
Bank/e-wallet/loan/SIM reference numbers	Helps institutions locate the disputed record
Demand letters or collection notices	Shows actual harm or risk
Prior correspondence with the company	Needed for escalation to BSP, NPC, CIC, or regulators
Specimen signature or old IDs	Helps compare forged signatures or altered ID details
Proof of location or impossibility	Useful when the fake transaction happened while you were abroad, at work, hospitalized, or elsewhere

For documents submitted to agencies, bring originals for verification and photocopies for filing. For online submissions, use clear PDF scans.

Special Notes for Filipinos Abroad and Foreigners

Filipinos Abroad

If you are outside the Philippines and need to submit an affidavit, you may need either:

A consularized affidavit executed before a Philippine Embassy or Consulate; or
A notarized affidavit abroad with an apostille, if executed in a country that is part of the Apostille Convention and the receiving Philippine office accepts it for that purpose.

Keep copies of your passport pages, immigration stamps, boarding passes, employment records, or residence documents if they prove you were abroad when the fake ID was used in the Philippines.

Foreigners in the Philippines

Foreigners may also be victims of fake Philippine IDs or fake accounts using passport details, ACR I-Card information, visa pages, or local address records.

Prepare:

Passport bio page
Visa or entry stamp
ACR I-Card, if applicable
Local address proof
Police/NBI report
Affidavit of denial
Certification from employer, school, hotel, landlord, or bank if relevant

If a foreign document is needed in the Philippines, apostille or consular authentication may be required depending on the issuing country and the receiving office’s rules.

Foreigners Outside the Philippines

If your passport details were used to make a fake Philippine account or ID, report to:

The institution that accepted the fake identity
Your embassy or consulate, if passport misuse is involved
Philippine cybercrime authorities if the fraud occurred through Philippine platforms or affected Philippine accounts
Local police in your country, especially if your passport scan was stolen abroad

Philippine enforcement may be slower when the suspect, servers, documents, or witnesses are abroad. Still, a written report and affidavit help protect you from later accusations.

Common Scenarios and What to Do

Someone Used My ID to Get an Online Loan

Immediately dispute the loan in writing. Send the lender your affidavit of denial, proof of identity, screenshots, and police/NBI report if available. Ask them to stop collection activity while investigating and to preserve the application record, selfie verification, IP logs, device identifiers, phone number, disbursement account, and communications.

If the lender is a bank or BSP-supervised entity, BSP escalation may be available. If it is a financing or lending company, SEC regulatory channels may be relevant. If personal data was misused or the company refuses to correct records, the NPC may also be relevant.

A SIM Card Was Registered Under My Name

Report to the telco and request verification, deactivation, correction, and investigation. Ask for a written incident or ticket number. If the SIM was used for scams, report to cybercrime authorities. If the telco refuses to act or mishandled your data, consider NPC and NTC escalation.

My Fake ID Was Used to Open a Bank or E-Wallet Account

Report to the bank or e-wallet immediately. Ask them to flag the KYC profile as disputed identity theft and preserve records. If there are disputed transactions, ask whether temporary holding or coordinated verification under AFASA/BSP rules applies. File a cybercrime report if scam proceeds or unauthorized access is involved.

Debt Collectors Are Harassing Me for a Loan I Never Took

Do not ignore the demand, but do not admit the debt. Reply in writing that the account is disputed due to identity theft. Ask for the original creditor, account details, application documents, disbursement records, and proof of your alleged consent. Send your affidavit of denial and report reference number. Keep records of abusive messages, threats, public shaming, or contact with your relatives or employer.

Someone Used My ID for a Fake Social Media Account

Report the account to the platform and preserve screenshots before takedown. If the account is used to scam, threaten, extort, impersonate, or solicit money, report to NBI or PNP cybercrime units. If your ID image came from a company or platform that mishandled your data, consider an NPC complaint.

A Government Office Says My Record Has a Problem

Ask which document, transaction, application, or record caused the issue. Request a written list of requirements to correct or annotate the record. Submit a notarized affidavit of denial, police/NBI report, and proof of your genuine identity. For specific IDs, coordinate directly with the issuing agency, such as PSA/PhilSys for National ID concerns, DFA for passport concerns, LTO for driver’s license concerns, or BIR for TIN-related issues.

Practical Pitfalls to Avoid

Do Not Pay a Fake Loan Just to “Make It Go Away”

Paying can be misinterpreted as acknowledgment, and it may not stop future collection or credit reporting. Dispute first in writing.

Do Not Rely on Phone Calls Alone

Phone calls are useful for urgency, but written records matter. Use email, ticket systems, official complaint forms, or registered mail when possible.

Do Not Post Your Full ID Online to Prove Your Innocence

Posting your complete ID may expose you to more identity theft. Redact unnecessary numbers when posting publicly, but keep unredacted copies for official agencies.

Do Not Threaten the Suspect Online

Threats can complicate your case. Preserve evidence and report through proper channels.

Do Not Delay Because “Nothing Happened Yet”

Many victims act only after debt collectors or police contact them. Early reporting helps prove you did not participate.

Do Not Send IDs Through Unverified “Help Desks”

Scammers often pretend to be bank, telco, NBI, or platform staff. Use official websites, official email domains, physical branches, or verified app channels.

Typical Timelines in Real Life

Timelines vary widely, but these are common practical ranges:

Action	Usual Practical Timeline
Evidence gathering	Same day
Police blotter	Same day, depending on station queue
Notarized affidavit	Same day to a few days
Bank/e-wallet initial fraud ticket	Same day to several business days
Telco SIM dispute	Several days to weeks, depending on verification
NBI/PNP cybercrime intake	Same day for filing; investigation may take weeks or months
NPC written notice to respondent	Give at least the period required by NPC rules before formal complaint, commonly tied to the 15-calendar-day exhaustion concept
BSP escalation	Usually after reporting first to the financial institution
Credit record correction	Weeks to months, depending on lender verification and reporting cycles
Prosecutor preliminary investigation	Often months, depending on docket, evidence, and respondent participation
Court case	Months to years if criminal charges are filed

The biggest bottlenecks are usually identifying the real person behind the fake ID, getting records from platforms or financial institutions, obtaining cybercrime warrants when needed, and coordinating between banks, telcos, law enforcement, and regulators.

What a Good Written Dispute Should Say

A strong dispute letter is short, specific, and evidence-based. It should include:

“I deny making, signing, submitting, registering, authorizing, or benefiting from this account/application/transaction.”
“My personal information appears to have been used without my consent.”
“Please preserve all application records, KYC documents, uploaded IDs, selfies, IP logs, device data, phone numbers, email addresses, disbursement records, and communications.”
“Please mark the account as disputed due to identity theft.”
“Please suspend collection, negative reporting, or further processing while the fraud investigation is pending.”
“Please provide written confirmation of the action taken.”

Attach your affidavit, ID, screenshots, and report reference numbers.

Frequently Asked Questions

Is making a fake ID using my information a crime in the Philippines?

Yes, it can be. Depending on the facts, it may involve falsification under the Revised Penal Code, computer-related identity theft or forgery under RA 10175, data privacy violations under RA 10173, financial fraud under RA 8484 or RA 12010, SIM registration violations under RA 11934, estafa, or civil liability for damages.

Should I go to the barangay first?

For serious fake ID cases involving loans, bank accounts, SIMs, cybercrime, falsification, or scams, barangay reporting is usually not enough. A barangay blotter may help as an early record, but you will often need to report to the police, NBI/PNP cybercrime units, the institution involved, NPC, BSP, NTC, CIC, or the proper issuing agency.

What if the fake ID used my real ID number but another person’s photo?

That is a strong sign of identity misuse. Preserve the image, report it to the institution that accepted it, execute an affidavit of denial, and ask the issuing agency or institution to verify and flag the record. If it was submitted online, report it as a possible cybercrime.

Can I force a bank, e-wallet, or lending app to give me the scammer’s information?

Not always directly. Institutions must also follow privacy, bank secrecy, cybersecurity, and internal investigation rules. However, you can request records about the account allegedly under your name, ask them to preserve evidence, and report to law enforcement or regulators. Authorities may obtain records through proper legal processes.

What if I am being collected for a loan I never applied for?

Dispute the loan in writing immediately. Do not admit liability. Ask for the application documents, disbursement record, phone number, email address, bank/e-wallet destination, and proof of consent. Submit an affidavit of denial and report the identity theft. If the lender continues improper collection or refuses to correct records, regulator complaints may be appropriate.

Can I file a complaint with the National Privacy Commission?

Yes, if your personal data was misused, improperly disclosed, unlawfully processed, inadequately secured, or not corrected despite notice. The NPC process generally requires a properly formatted and notarized or verified complaint, supporting evidence, and compliance with exhaustion of remedies unless an exception applies.

What if I am abroad and cannot personally appear in the Philippines?

You can still prepare evidence, send written disputes to institutions, and execute an affidavit abroad through a Philippine Embassy/Consulate or through notarization and apostille where accepted. For criminal investigations, personal appearance may eventually be required, but early written reporting still helps protect your record.

Can I sue for damages?

Possibly. Civil Code provisions on unlawful acts, abuse of rights, privacy, and damages may apply, especially if you suffered financial loss, reputational harm, credit damage, harassment, or emotional distress. Civil liability may also arise from criminal conviction under certain laws. The best first step is to document the harm clearly.

Should I replace all my IDs?

Not always. Replacing IDs may help if the physical card was lost or the ID number can be changed, but many government ID numbers cannot easily be replaced. More important is to report the misuse, secure accounts, monitor credit and financial records, and notify institutions that may rely on the compromised ID.

What if the fake ID was made by someone I know?

Preserve evidence before confronting the person. If the fake ID was used for fraud, loans, SIMs, accounts, or official documents, treat it as a formal legal issue, not just a personal dispute. File reports and written denials so the record is clear even if the person later denies involvement.

Key Takeaways

A fake ID using your personal information can involve falsification, identity theft, cybercrime, data privacy violations, financial fraud, SIM registration violations, and civil damages.
Preserve screenshots, links, messages, account numbers, transaction IDs, and copies of the fake ID before they disappear.
Execute a notarized Affidavit of Denial or Affidavit of Identity Theft when disputing loans, accounts, SIMs, or records.
Report to the institution involved first, then escalate to the proper authority: NBI/PNP for cybercrime, NPC for privacy violations, BSP for financial consumer complaints, NTC/DICT for SIM issues, and CIC channels for credit report disputes.
Do not pay fake debts, admit liability, or send more IDs through unofficial channels.
Filipinos abroad and foreigners can still protect themselves through affidavits, apostilled or consular documents, written disputes, and official reports.
The most important protection is a clear paper trail showing that the fake ID was unauthorized, promptly reported, and formally disputed.