A lost SIM card can quickly become an identity-theft and account-takeover problem. Whoever has it may receive one-time passwords, reset online accounts, impersonate you through calls or messages, or attempt to access your bank and e-wallet accounts. Your priorities are to have the SIM barred immediately, secure every account connected to the number, preserve evidence, warn affected contacts, and report any fraud or threats to the proper authorities.

Immediate risk	What to do now
The SIM can still make calls, send texts, or receive OTPs	Report it to your telecommunications provider and demand immediate barring
Bank or e-wallet accounts use the number	Call each institution’s fraud hotline and request account protection
Someone is impersonating you	Warn contacts through a different, verified channel
Money has been transferred	Dispute the transaction immediately and ask that recipient funds be held or traced
The user is threatening, blackmailing, or scamming people	Preserve the evidence and report it to the PNP, NBI, or CICC
The telco does not act promptly	Escalate the matter to the National Telecommunications Commission

Why a Lost SIM Card Is a Serious Security Risk

A SIM card is not merely a way to make calls. Many services treat control of a mobile number as proof of identity. A person holding your SIM may be able to:

Receive SMS one-time passwords or verification codes.
Reset email, social media, shopping, banking, and e-wallet passwords.
Impersonate you when contacting relatives, customers, employers, or business partners.
Recover accounts that use your number as a backup authentication method.
Register messaging applications under your number.
Solicit money while pretending to be you.
Use the number in phishing, fraud, harassment, or threats.

The greatest danger is often your primary email account. Once another person controls that email, they may reset several other accounts even after the SIM has been disabled. Secure the email account connected to the number as soon as possible.

Your Rights and Duties Under the SIM Registration Act

The main law is Republic Act No. 11934, or the SIM Registration Act of 2022, together with its implementing rules under NTC Memorandum Circular No. 001-12-2022.

You must report the lost SIM immediately

The registered end-user must immediately inform the public telecommunications entity, or PTE, of a lost or stolen SIM. The implementing rules say the subscriber should provide identifying information and other reasonable proof needed to establish ownership of the number. (Supreme Court E-Library)

Do not wait until you have obtained an affidavit of loss. Report the incident first through the provider’s official hotline, application, website, chat service, or store. Supporting documents may be submitted afterward if the provider requires them for replacement.

The telco must bar and deactivate the lost SIM

The implementing rules require the provider to immediately bar a reported lost or stolen SIM. Barring temporarily prevents the SIM from making or receiving calls, sending messages, or using mobile data.

The provider must then permanently deactivate the lost SIM when a replacement is issued or within 24 hours from the report, whichever happens earlier. The provider must also maintain a practical mechanism through which subscribers can report lost or stolen SIMs. (Supreme Court E-Library)

Because the 24-hour period runs from the report, keep proof of when the provider received it. Ask for:

A reference or ticket number.
The date and exact time of the report.
Written confirmation by email, text, or chat.
The name or agent number of the representative.
Confirmation that both outgoing and incoming services have been barred.

SIM registration does not automatically make you guilty of another person’s acts

A number being registered in your name does not, by itself, prove that you physically possessed or used the SIM when an offense occurred. Criminal liability still depends on evidence showing who committed the act and with what intent.

However, a delayed report can create practical difficulties. Investigators, banks, victims, and platforms may initially trace the number to its registered subscriber. A prompt telco report, police record, replacement request, and account-security log can help establish that you lost control of the SIM before the questioned activity occurred.

Subscriber information is confidential, but investigators can obtain it lawfully

SIM registration data is generally confidential. A provider may disclose identifying information under the circumstances allowed by law, including when a competent authority issues a subpoena based on a sworn complaint concerning a specific number used in a criminal, fraudulent, malicious, or otherwise unlawful act. (Supreme Court E-Library)

This means an ordinary complainant usually cannot simply demand the name, address, or registration records of the person using a number. Police investigators, prosecutors, and courts must use the proper legal process.

What Crimes May Be Involved?

The precise charge depends on what the person did with the SIM.

Computer-related identity theft or fraud

Under the Cybercrime Prevention Act of 2012, Republic Act No. 10175, computer-related identity theft includes intentionally acquiring, using, misusing, possessing, altering, or deleting another person’s identifying information without right. Computer-related fraud may apply when data or a computer system is manipulated to cause loss or obtain a benefit. (Supreme Court E-Library)

Using a lost SIM to take over an email account, reset a digital wallet, or impersonate the registered subscriber may fall within these offenses, depending on the evidence.

Estafa and access-device offenses

A person who pretends to be the subscriber and deceives another into sending money may be prosecuted for estafa, or swindling, under Article 315 of the Revised Penal Code. Penalties generally depend on the amount involved and the applicable amendments under Republic Act No. 10951. (Lawphil)

The Access Devices Regulation Act of 1998, Republic Act No. 8484, may also apply when codes, account identifiers, PINs, telecommunications identifiers, or similar access devices are fraudulently used to obtain money, services, or account access. (Supreme Court E-Library)

Bank and e-wallet fraud

The Anti-Financial Account Scamming Act, Republic Act No. 12010, applies to fraudulent activity involving financial accounts, including bank and e-wallet accounts. It covers schemes that use deception or electronic communications to obtain sensitive identifying information or gain unauthorized access to an account. (Lawphil)

A bank or e-wallet may temporarily hold disputed funds while conducting verification. Under current Bangko Sentral ng Pilipinas rules, an initial hold may last up to five calendar days, while the total temporary holding period may reach 30 calendar days when legally justified. This is why reporting within minutes or hours—not several days later—can materially improve the chance of preventing further transfers. Recovery is never guaranteed, especially after funds have been withdrawn, converted, or moved through several accounts.

Civil liability for damage to your identity, privacy, or reputation

Articles 19, 20, and 21 of the Civil Code require people to act with justice, honesty, and good faith and may require compensation when unlawful or deliberately harmful conduct causes damage. Article 26 protects a person’s dignity, privacy, personality, and peace of mind. (Lawphil)

A civil claim may be possible when SIM misuse causes provable financial loss, reputational injury, invasion of privacy, or emotional harm. The practical value of a civil case will depend on whether the offender can be identified, located, and shown to have caused the damage.

What to Do If Someone Is Using Your Lost SIM Card

1. Report the loss to your telco immediately

Use only official channels. Clearly state:

My registered SIM has been lost or stolen and appears to be in use by another person. Please immediately bar all incoming and outgoing services and permanently deactivate the lost SIM within the period required by Republic Act No. 11934 and its implementing rules.

Provide the following, if available:

Full registered name.
Mobile number.
Date of birth and registered address.
Approximate date, time, and place of loss.
Last load purchase, bill payment, or account transaction.
SIM bed, eSIM voucher, or original packaging.
Recent numbers called or texted.
Postpaid account number or prepaid account details.
Government-issued identification.
Device International Mobile Equipment Identity, or IMEI, if the phone was also lost.

Never provide an OTP, account PIN, password, or online-banking credential to someone claiming to be a telco agent.

2. Secure your primary email account first

From a trusted device:

Change the email password.
Sign out all other sessions and unfamiliar devices.
Remove the lost number as a recovery method where possible.
Review forwarding rules, recovery addresses, and security activity.
Replace SMS authentication with an authenticator application, security key, or passkey.
Save backup recovery codes somewhere secure.

Then repeat the process for social media, messaging applications, cloud storage, online shopping accounts, government portals, and work accounts.

If the phone itself was lost, use the manufacturer’s device-location service to mark it lost or remotely erase it. Do not personally confront anyone shown at the device’s location.

3. Call every bank, credit-card issuer, and e-wallet connected to the number

Use the institution’s official fraud hotline—not a number sent through text or social media.

Ask the institution to:

Block mobile and online access.
Remove or suspend the lost number as an authentication channel.
Freeze affected cards or accounts where appropriate.
Record an unauthorized-access or disputed-transaction report.
Place a hold on questionable recipient funds when legally available.
Preserve transaction, device, IP-address, and login records.
Issue a case or complaint reference number.
Explain the documentary requirements and dispute deadline.

Financial institutions generally require account owners to report disputed transactions immediately. Begin with the institution’s own consumer-assistance mechanism. If the response is inadequate, the matter may be escalated through the BSP consumer-assistance channels, including the BSP Online Buddy and the Consumer Information and Redress form.

Do not send passwords, PINs, full card details, or OTPs with a BSP complaint.

4. Warn your contacts through another verified channel

Tell family members, coworkers, customers, and business contacts that the number is compromised. Keep the warning brief and factual:

Do not send money based on messages from the lost number.
Do not provide OTPs, IDs, account information, or personal details.
Verify unusual requests through another known number or in person.
Preserve suspicious messages rather than deleting them.

Avoid publicly naming a suspected offender unless you have reliable evidence. An incorrect accusation can create a separate legal problem.

5. Preserve evidence before accounts or messages disappear

Create a chronological incident file containing:

Screenshots showing the entire screen, number, username, date, and time.
Original messages, emails, call logs, and voicemail.
Transaction reference numbers and recipient-account details.
Login-alert emails and password-reset notices.
Telco reports, chat transcripts, and ticket numbers.
Bank and e-wallet complaint records.
SIM packaging, receipts, bills, and proof of ownership.
The phone’s IMEI, serial number, model, and purchase receipt.
Names and contact details of people who received fraudulent requests.
A written timeline stating when the SIM was last in your possession and when misuse was first discovered.

Keep unedited copies. Do not crop away timestamps or identifying details. Back up the evidence to a separate device or cloud account that the offender cannot access.

Do not hack into an account, unlawfully record private communications, or pose as another person to “trap” the user. Give investigators the evidence and allow them to use lawful preservation and subpoena procedures.

6. Report actual misuse to cybercrime authorities

A telco report stops the service; it does not automatically begin a criminal investigation.

If the SIM was used for fraud, identity theft, threats, blackmail, account takeover, or unauthorized transfers, report the incident to one or more of the following:

Philippine National Police Anti-Cybercrime Group.
National Bureau of Investigation Cybercrime Division.
Cybercrime Investigation and Coordinating Center.
The local police station, which can record the incident and coordinate referral.
The prosecutor’s office when preparing a formal criminal complaint.

The BSP’s official fraud guide directs victims of scams and unauthorized financial transactions to law-enforcement bodies such as the PNP, NBI, and CICC. Their contact details may change, so verify the current information through the agencies’ official pages.

A barangay blotter may document that you reported an incident locally, but it does not replace telco deactivation, a bank dispute, or a cybercrime complaint. Barangay conciliation is generally not a practical first remedy when the offender is unknown, digital evidence must be preserved, or urgent financial protection is required.

7. Prepare an affidavit of loss and request a replacement SIM

An affidavit of loss is a sworn statement describing:

Your identity and ownership of the number.
When and where you last possessed the SIM.
How the SIM or phone was lost or stolen.
When you discovered the loss.
Any unauthorized activity discovered afterward.
The steps you took to report and secure the number.

The affidavit must be signed personally before a notary public when notarization is required. Bring valid identification. Do not sign it beforehand unless the notary instructs you to do so.

The law requires immediate reporting and barring; it does not require you to finish the affidavit before the provider acts. The affidavit is more commonly required for replacement, ownership verification, insurance, or a formal complaint.

8. Escalate telco inaction to the NTC

Escalation is appropriate when the provider:

Does not bar the SIM promptly.
Allows the lost SIM to remain active beyond the statutory period.
Cannot provide a report reference number.
Repeatedly closes the complaint without action.
Refuses to investigate documented fraudulent use.
Imposes requirements inconsistent with its published process without explanation.

Submit the telco complaint history, screenshots, identification, proof of ownership, and evidence of the continuing activity to the relevant National Telecommunications Commission office. NTC regional offices publish consumer-complaint and lost-device forms, including forms relating to ownership, loss, and requests involving lost SIMs or phones. (Region 7 NTC)

Typical Documents, Costs, and Timelines

Purpose	Common requirements	Practical timing or cost
Immediate SIM barring	Registered name, mobile number, identity verification, details of loss	Should be initiated immediately
Permanent deactivation	Loss report and reasonable ownership verification	Required within 24 hours of the report, or upon replacement if earlier
Replacement with the same number	Valid government ID, ownership proof, account details, SIM bed or voucher if available, affidavit when required	May be completed the same day or take several business days, depending on verification and stock
Affidavit of loss	Government ID and complete facts of the loss	Notarial fees vary by location and notary
Bank or e-wallet dispute	ID, transaction records, screenshots, account details, complaint reference	Report immediately; investigation periods depend on the institution and transaction
Police or cybercrime complaint	ID, sworn or written narrative, evidence, telco acknowledgment, transaction records	Intake may occur the same day; investigation and prosecution can take substantially longer
NPC complaint	Complaint form, evidence, prior correspondence, notarization	No single resolution period applies to every case
NTC complaint	Telco ticket, proof of report time, ID, ownership proof, correspondence	Depends on referral, provider response, and complexity

SIM registration itself must be provided without charge. Replacement-SIM charges, document costs, and notarization expenses are not uniformly fixed by the SIM Registration Act and may vary by provider and location. (Supreme Court E-Library)

Practical Differences Among Philippine Telcos

Provider procedures change, so check the current official requirements before visiting a store.

Globe or TM

Globe’s published procedures commonly require the registered owner to present an original valid government-issued ID. Proof such as the SIM bed, GCash card, or eSIM voucher may be requested when available. For some lost-SIM processes, Globe may require a notarized affidavit of loss, although temporary barring may be requested while supporting documents are being prepared. (Globe Telecom)

Smart or TNT

Smart’s published replacement process generally requires a valid government-issued ID and a request from the registered SIM owner at a Smart Store. Lost postpaid SIMs may have outgoing services barred immediately after a proper report, with additional barring available as needed. (Smart Help)

DITO

DITO accepts customer-service reports through its official digital channels and hotline 185. Its terminology may describe number recovery as transferring the existing mobile number to another DITO SIM rather than replacing the physical card itself. Store-based verification may be required. (DITO)

Special Situations

The SIM is being used to ask your contacts for money

Warn the recipients immediately and ask them not to delete the messages. Anyone who already sent money should separately report the transaction to their own bank or e-wallet and obtain a complaint reference.

Your complaint should identify:

The compromised number.
The exact fraudulent representation.
The recipient account or wallet.
The amount and transaction time.
The affected witnesses.
When you lost control of the SIM.

An unauthorized transfer has already happened

Secure the account first, then dispute every unauthorized transaction individually. A police report may strengthen the documentation, but do not delay the initial bank or e-wallet report while waiting for one.

Ask whether the institution has:

Flagged the recipient account.
Sent an inter-institution fraud notice.
Placed a temporary hold where legally permitted.
Preserved device and login information.
Identified any later transfer or cash-out destination.

The number is registered under another person’s name

The registered person will ordinarily need to participate in ownership verification and replacement. This commonly happens when a family member originally registered the SIM or when an employer owns a company-issued number.

Do not submit a false affidavit or pretend to be the registered subscriber. Coordinate with the registered owner, employer, or authorized company representative.

You are outside the Philippines

Use the provider’s official online or international support channels to request immediate barring. Ask whether remote verification or an authorized representative is permitted.

A provider may require:

A signed authorization or special power of attorney.
Copies of the owner’s and representative’s IDs.
Proof that the owner is abroad.
Notarization, consular acknowledgment, or an apostille for a document executed overseas.

Requirements differ among providers and between prepaid, postpaid, individual, and corporate accounts. Confirm the exact format before paying for overseas notarization or authentication. Some providers allow representatives only in limited situations, such as when the subscriber is abroad, elderly, ill, or bedridden. (Globe Telecom)

Personal data was mishandled by the telco or another organization

The National Privacy Commission is relevant when an organization failed to secure your personal information, disclosed it unlawfully, refused a valid data-subject request, or otherwise violated the Data Privacy Act.

Data subjects may dispute inaccurate information, seek blocking or removal in appropriate cases, and claim indemnity for damage caused by violations. Organizations controlling personal data must maintain reasonable safeguards against unlawful access and fraudulent misuse. (National Privacy Commission)

The NPC currently requires its complaint form to be completed, notarized, and submitted with supporting evidence. See the National Privacy Commission’s complaint instructions. A privacy complaint is different from a criminal complaint against the person who physically used the SIM. (National Privacy Commission)

Common Mistakes to Avoid

Waiting for an affidavit before reporting the SIM. Barring should be requested immediately.
Securing social media but forgetting email. Email is often the gateway to other accounts.
Using links sent by the suspected offender. Contact the provider or bank through its official application, website, or published hotline.
Deleting embarrassing or threatening messages. Preserve them as evidence.
Paying the user to return the SIM. Payment does not ensure that copied data, passwords, or account access will be surrendered.
Assuming a barangay blotter alone solves the problem. It does not deactivate a SIM or freeze a financial account.
Ignoring small unauthorized transfers. Criminals sometimes test an account with a small transaction before attempting a larger one.
Posting IDs, affidavits, or transaction details publicly. This can expose more personal data.
Accusing a person without sufficient evidence. Preserve suspicions for investigators and avoid defamatory public statements.
Failing to record reference numbers. A complete paper trail is essential when escalating a complaint.

Frequently Asked Questions

Am I automatically liable because the SIM is registered in my name?

No. Registration identifies the subscriber but does not conclusively prove who possessed or used the SIM during a particular act. Investigators must still establish participation and criminal intent. Prompt reporting and documented loss help show when you stopped controlling the number.

How quickly must the telco deactivate my lost SIM?

The provider must immediately bar a properly reported lost or stolen SIM. Permanent deactivation must occur when a replacement is issued or within 24 hours of the report, whichever is earlier. (Supreme Court E-Library)

Do I need an affidavit of loss before the telco blocks the SIM?

The law does not make completion of an affidavit a condition for the initial report or immediate barring. Providers may require an affidavit for replacement or additional verification. Ask for temporary barring while the document is being prepared.

Can I keep the same mobile number?

Often, yes, after the provider verifies that you are the registered owner. Approval depends on the provider’s security checks, account status, available replacement method, and whether the number has already been permanently disconnected or recycled.

Can I personally find out who is using the SIM?

Usually not through the SIM registration database. Subscriber information is confidential. Law-enforcement authorities may obtain relevant records through a subpoena or another lawful process based on a specific complaint. (Supreme Court E-Library)

Can stolen money still be recovered?

Sometimes, particularly when the transaction is reported before the funds are withdrawn or transferred again. Banks and e-wallets may flag or temporarily hold funds under applicable rules, but recovery is not guaranteed. Report immediately and provide complete transaction details. (Lawphil)

Should I report the matter to the barangay?

A barangay blotter can provide an additional dated record, especially when the loss or suspected offender is local. It is not a substitute for reporting the SIM to the telco, disputing financial transactions, or filing a cybercrime complaint.

What if the telco has not blocked the SIM after 24 hours?

Follow up in writing, cite the original ticket and report time, and demand confirmation of deactivation. Escalate the complete complaint record to the NTC. If continued use causes financial or identity-related harm, also notify the relevant bank, platform, and law-enforcement agency.

Can I sue the person using my lost SIM?

A criminal complaint may be possible for identity theft, computer-related fraud, estafa, access-device offenses, threats, or other crimes supported by the facts. A civil claim for damages may also be available under Articles 19, 20, 21, or 26 of the Civil Code. The offender must first be identified, and the loss or injury must be adequately proved. (Supreme Court E-Library)

Is it safe to post a warning on social media?

A brief factual warning is usually useful: state that the number is compromised and that requests for money or information should be ignored. Do not publish complete IDs, account numbers, evidence containing private data, or accusations against an unverified suspect.

Key Takeaways

Report the lost SIM immediately and obtain a dated telco reference number.
Demand immediate barring and permanent deactivation within the legal period.
Secure your primary email before working through other connected accounts.
Notify banks and e-wallets at once; minutes can matter when funds are still traceable.
Preserve original messages, transaction details, login alerts, and complaint records.
Warn contacts through another verified communication channel.
File a cybercrime report when the number is used for fraud, threats, identity theft, or account takeover.
Escalate telco inaction to the NTC and data-privacy violations to the NPC.
Do not assume that SIM registration alone makes you responsible for another person’s conduct, but create a clear paper trail showing when you lost control of the number.