Finding out that a lending app account was opened using your IDs can feel frightening, especially when collectors start calling, your relatives receive messages, or a loan appears under your name even though you never borrowed anything. In the Philippines, this is not just a “collection problem.” It may involve identity theft, fraud, unlawful processing of personal data, unfair debt collection, and possible damage to your credit record. The most important thing is to act quickly, keep evidence, dispute the account in writing, and report the matter to the correct agencies.

Is the Lending App Loan Valid If You Did Not Apply?

A loan is a contract. Under Article 1318 of the Civil Code, a valid contract requires consent, a definite object, and a lawful cause. If someone used your ID without your authority, your main position should be simple: you did not consent to the loan, you did not receive the money, and you dispute the account.

In practice, however, lending apps may rely on uploaded IDs, selfies, phone numbers, device data, or e-wallet disbursement records as “proof” that an account was created. That is why you should not only say “that is not mine.” You should demand the actual records behind the account, including:

the loan application date and time;
the mobile number, email, device, and e-wallet or bank account used;
the ID images and selfie or liveness check submitted;
the disclosure statement and loan agreement;
the disbursement details showing where the money was sent;
the consent record for data processing and credit reporting.

Do not pay just to “make it stop” unless you have verified the facts and made a clear decision. Payment may later be treated by the lender as an acknowledgment of the account, even if you paid only because of harassment.

Philippine Laws That May Apply

Several Philippine laws may protect you, depending on what happened.

Cybercrime and Identity Theft

Republic Act No. 10175, or the Cybercrime Prevention Act of 2012, punishes computer-related identity theft, which includes the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of another person’s identifying information without right. This is directly relevant when someone uses your government IDs, selfie, phone number, or personal details to create an online lending account. (Lawphil)

The case may also involve ordinary crimes under the Revised Penal Code, such as estafa under Article 315 if deceit caused financial damage, or falsification under Articles 171 and 172 if documents, signatures, application records, or declarations were falsified. Whether these charges fit depends on the evidence, especially who submitted the application, who received the loan proceeds, and what documents were fabricated.

Data Privacy Rights

Republic Act No. 10173, or the Data Privacy Act of 2012, protects personal information and sensitive personal information. Government-issued numbers, IDs, licenses, tax records, and similar identifiers are treated as sensitive personal information. The law gives data subjects rights to be informed, access processed data, dispute inaccuracies, request correction, and request blocking, removal, or destruction of personal information that is false, unlawfully obtained, outdated, or used for unauthorized purposes. (National Privacy Commission) (National Privacy Commission)

This matters because a lending app is not free to keep using your ID, report a disputed loan, contact your relatives, or process your data for collection if the account was fraudulently created and you have already raised a proper dispute.

Financial Consumer Protection

Republic Act No. 11765, or the Financial Products and Services Consumer Protection Act of 2022, protects financial consumers’ rights to fair treatment, disclosure, protection against fraud and misuse, data privacy, and timely complaint handling. It also covers digital financial products and services, including credit accessed through digital channels, and recognizes the SEC as a financial regulator for entities under its jurisdiction. (Supreme Court E-Library)

Under the same law, financial service providers must have consumer assistance mechanisms, protect client data, avoid abusive collection practices, and allow clients to review and correct inaccurate or deficient data. For alleged unauthorized transactions, the law also contemplates reasonable accommodations while investigation is pending. (Supreme Court E-Library)

SEC Rules on Lending Companies and Debt Collection

Most lending companies, financing companies, and online lending platforms are regulated by the Securities and Exchange Commission. Republic Act No. 9474, the Lending Company Regulation Act of 2007, regulates lending companies and requires authority from the SEC before a lending company may conduct lending business. (Lawphil)

SEC Memorandum Circular No. 18, Series of 2019 prohibits unfair debt collection practices by financing and lending companies. Prohibited acts include threats, obscene or insulting language, false representations, disclosure of borrowers’ personal information, communicating false loan information, contacting people in the borrower’s contact list other than guarantors or co-makers, and contacting borrowers at unreasonable hours such as before 6:00 a.m. or after 10:00 p.m., subject to the circular’s stated exceptions.

The National Privacy Commission has also specifically warned that online lending apps are prohibited from harvesting phone contacts and social media contacts for harassment or debt collection. It identified unnecessary permissions such as accessing phone contact lists, harvesting social media contacts, and copying or saving them for collection or harassment. (National Privacy Commission)

What to Do Immediately

1. Preserve Evidence Before You Block or Delete Anything

Your evidence is often the difference between a dismissed complaint and a serious investigation. Save:

screenshots of all messages, including sender name, phone number, username, date, and time;
call logs from collectors;
app notifications and loan account details;
emails confirming account creation or loan approval;
screenshots showing the e-wallet, bank, or mobile number connected to the loan;
messages sent to your relatives, employer, friends, or co-workers;
social media posts, group chats, or public shaming posts;
proof that you were somewhere else when the loan was supposedly applied for, such as travel records, work logs, immigration stamps, or flight tickets;
copies of your lost ID report, police blotter, or prior complaints if your IDs were previously stolen.

Take screenshots in a way that shows the full context. Do not crop out the sender, timestamp, or account name. If relatives received messages, ask them to send screenshots and not just describe what happened.

2. Do Not Admit the Debt

When replying to the lender or collector, avoid statements like:

“I will pay when I have money.”
“Can you reduce my balance?”
“Please give me more time.”
“I borrowed but I did not receive the money.”

Use clear dispute language instead:

I dispute this account. I did not apply for this loan, I did not authorize the use of my IDs or personal data, and I did not receive the loan proceeds. Please preserve all account creation, KYC, device, consent, disbursement, and collection records. Please stop collection activity and negative reporting while this identity theft dispute is under investigation.

Send this through channels that create a record: email, in-app support ticket, website form, or registered mail if needed. If you only call, follow up with written confirmation.

3. Demand the Loan and KYC Records

Ask the lending app for documents showing how the account was opened. Specifically request:

copy of the loan agreement and disclosure statement;
copy of IDs submitted;
selfie, liveness check, or video verification used;
phone number, email address, and device information used for registration;
date, time, IP logs, and location data if available;
e-wallet or bank account where proceeds were disbursed;
consent record for processing and sharing your data;
record of any report made to the Credit Information Corporation or credit bureaus;
name and contact details of the lender’s Data Protection Officer or consumer assistance unit.

If they refuse to give any information because of “privacy,” answer calmly: you are the data subject whose identity is being used. Under the Data Privacy Act, you have rights to access your processed personal data and dispute inaccuracies.

4. File a Complaint With the SEC for the Lending App Side

Use the SEC when the issue involves a lending company, financing company, online lending platform, abusive collection, hidden charges, or operation without authority. The SEC iMessage portal is the SEC’s web-based platform for public inquiries and complaints. (Securities and Exchange Commission)

Your SEC complaint should include:

your full name and contact details;
name of the lending app and, if known, the registered company behind it;
loan account number or reference number;
timeline of events;
statement that your IDs were used without authority;
screenshots of collection messages and harassment;
proof that you disputed the account with the lender;
proof of messages sent to third parties, if any;
copy of your valid ID with sensitive numbers partially masked, unless the SEC specifically requires a full copy;
police/NBI report, if already available.

If you do not know the company behind the app, include the app name, website, screenshots from the app store, collector numbers, payment channels, and any business name appearing in messages or payment instructions.

5. File a Privacy Complaint With the NPC When Your Data Was Misused

File with the National Privacy Commission if your personal data was collected, used, shared, disclosed, reported, or retained without proper authority. This is especially important if:

your ID was used to create the account;
your contacts were messaged;
your photo or personal details were sent to others;
the lender refuses to correct or block false data;
the app continues processing your data after you dispute the account.

The NPC’s complaint rules generally require you to first inform the respondent in writing and give it a chance to address the issue. The NPC states that proof of this “exhaustion of remedies” should be attached, and that no timely or appropriate action, or no response within 15 calendar days from receipt of your written notice, may support filing the complaint. (National Privacy Commission)

For formal complaints, the NPC requires a filled-out and notarized complaint form or verified complaint, with evidence attached. Submission may be in person, by courier, or by scanned email as allowed by the NPC. (National Privacy Commission)

6. Report Cybercrime or Fraud to NBI or PNP

If someone used your identity to obtain money, create accounts, or commit fraud online, report the incident to the NBI Cybercrime Division or the PNP Anti-Cybercrime Group. The NBI’s Citizen’s Charter describes investigative assistance for victims of computer crimes as available to the general public, with steps that include filing a complaint, preliminary interview, sworn statements, and submission of supporting documents. (National Bureau of Investigation)

Bring or prepare:

government ID;
printed screenshots;
phone numbers and account names used by collectors;
links or screenshots of social media posts;
loan account details;
proof your ID was lost or previously submitted elsewhere, if applicable;
proof you did not receive the loan proceeds;
affidavit or sworn statement;
contact details of witnesses, such as relatives who were harassed.

A barangay blotter or local police blotter can help create an early record, but it is usually not enough by itself for cybercrime investigation. For online identity theft, NBI or PNP cybercrime reporting is more appropriate.

7. Check and Dispute Your Credit Record

If the fake loan is reported as unpaid, it may affect your credit history. Republic Act No. 9510, the Credit Information System Act, created the credit information system to address the need for reliable credit information on borrowers. (Lawphil)

The Credit Information Corporation’s Online Dispute Resolution System is designed to resolve discrepancies between data submitted by a lender or other submitting entity and what appears in your CIC Credit Report. The CIC notes that it cannot unilaterally change data and must rely on the reported interactions and evidence submitted through the dispute process. (Credit Information Corporation)

A practical sequence is:

Obtain your CIC Credit Report through an official channel or accredited access provider.
Look for unfamiliar loans, wrong balances, or accounts you never opened.
File a dispute through the CIC dispute system.
Attach your dispute letter to the lender, police/NBI report, SEC or NPC complaint reference, screenshots, and proof that the loan proceeds did not go to you.
Follow up until the submitting entity corrects, deletes, or marks the data as disputed.

The Philippines does not have a simple “credit freeze” system like some countries. You usually need to dispute the incorrect account with the lender and the credit reporting system.

Documents You Should Prepare

Purpose	Documents or Evidence
Disputing with the lender	Dispute letter, valid ID, screenshots, account number, request for KYC and disbursement records
SEC complaint	Complaint narrative, lender/app details, screenshots, proof of harassment, proof of prior dispute, ID
NPC complaint	Notarized complaint or verified complaint, written notice to respondent, proof of 15-day non-response or inadequate action, evidence, affidavits
NBI/PNP report	ID, screenshots, phone numbers, app details, affidavit, witness details, proof of non-receipt of funds
CIC dispute	CIC Credit Report, proof of disputed account, lender dispute letter, SEC/NPC/NBI/PNP references
Overseas filing	SPA for Philippine representative, notarized or apostilled documents when needed, passport copy, proof of foreign residence or travel

Special Notes for OFWs and Foreigners

If you are outside the Philippines, you can still act. Many victims first discover the fraud because relatives in the Philippines receive collection messages.

For Filipinos abroad, prepare a clear written statement and authorize a trusted representative in the Philippines through a Special Power of Attorney if someone needs to appear for you. Depending on where the document is executed, it may need Philippine consular acknowledgment, apostille, or consular authentication.

For foreigners, include copies of the passport page or ACR I-Card allegedly used, but mask non-essential details in ordinary emails. If your passport was copied from a hotel, employer, visa process, condo lease, or business transaction, include a timeline of who previously received a copy. If you were not in the Philippines when the lending app account was opened, attach immigration stamps, tickets, boarding passes, or work records.

Common Mistakes That Make the Problem Worse

Paying Without a Written Reservation

Some people pay because collectors threaten to message their employer or relatives. If you decide to pay for safety or urgency, write “paid under protest and without admitting liability” in the payment notes and keep all records. Even then, payment can complicate your dispute.

Sending More Clear ID Copies to Random Collectors

Do not send full, unwatermarked IDs through Facebook Messenger, Viber, Telegram, or unknown emails. If you must submit ID to an official agency or verified lender channel, mark the copy with the purpose, date, and recipient, such as:

For identity theft dispute with [Company/Agency] only — [Date]

Ignoring Messages Sent to Your Contacts

If collectors message your relatives or co-workers, that is evidence. Ask recipients to preserve screenshots. Do not let everyone delete the messages out of panic.

Filing Only One Complaint

A lending app identity theft problem usually has several layers. The SEC handles lending and collection conduct. The NPC handles misuse of personal data. NBI or PNP handles cybercrime and fraud. CIC handles credit record disputes. Filing with only one office may not solve the whole problem.

Waiting Until the Loan Becomes Delinquent

Act as soon as you discover the account. Early written dispute helps show that you did not sleep on your rights and did not accept the loan.

Sample Short Dispute Letter

I am formally disputing the lending app account under my name. I did not apply for this loan, I did not authorize the use of my IDs or personal information, and I did not receive the loan proceeds. Please immediately place the account under fraud investigation, suspend collection activity, stop any negative credit reporting, and preserve all account creation, KYC, consent, device, IP, communication, and disbursement records.

Please provide copies of the loan application, disclosure statement, ID and selfie or liveness verification used, mobile number and email used for registration, date and time of application, disbursement account, and the legal basis for processing my personal data.

I also request correction, blocking, or removal of inaccurate and unlawfully processed personal data relating to this account, subject to preservation of evidence for investigation by the proper authorities.

Frequently Asked Questions

Am I legally required to pay a lending app loan I never applied for?

If you truly did not apply, did not authorize anyone, and did not receive the loan proceeds, your position is that there was no consent and no valid loan obligation on your part. But you must dispute it properly and preserve evidence because the lender may initially rely on uploaded IDs or app records.

What if the lending app has a copy of my ID and selfie?

A copy of your ID is not always conclusive proof that you borrowed. Ask for the full KYC trail: selfie or liveness check, phone number, email, device information, IP logs, loan agreement, disclosure statement, and disbursement account. Fraudsters often use stolen IDs, edited images, or compromised accounts.

Can online lenders message my contacts about the debt?

Generally, lending and financing companies should not contact people in your contact list unless they are guarantors or co-makers, and they should not disclose false or unnecessary loan information. SEC MC 18 treats contacting non-guarantor contact-list persons as an unfair debt collection practice, and the NPC has warned against harvesting phone and social media contacts for collection or harassment. (National Privacy Commission)

Should I block the collectors?

You may block abusive numbers after saving screenshots and call logs. But keep at least one written channel open with the lender’s official support or Data Protection Officer so you can show that you disputed the account and asked for investigation.

Where should I report lending app identity theft in the Philippines?

Use the SEC for lending company or collection issues, the NPC for misuse of personal data, NBI or PNP cybercrime units for identity theft or online fraud, and CIC if the account appears in your credit report. The right combination depends on the facts.

Can I file a complaint if I am abroad?

Yes. You can send written disputes by email, file online where available, and authorize a representative in the Philippines through an SPA if personal appearance is needed. Documents signed abroad may need consular acknowledgment, apostille, or authentication depending on the country and intended use.

Can the fake loan affect my credit score?

Yes, if the lender reports the account as unpaid or delinquent. Check your CIC Credit Report and file a dispute if the loan appears. Attach proof that the account is under identity theft dispute.

What if the person who used my ID is a relative, friend, or co-worker?

You can still report the fraud. The fact that the person is known to you does not automatically make the loan valid. However, if you voluntarily gave that person authority to borrow, receive proceeds, or use your account, the case becomes more complicated and may turn on what exactly you authorized.

Can I sue the lending app?

Possibly, depending on the facts. Claims may involve failure to verify identity, unlawful processing of personal data, unfair collection, damage to reputation, or inaccurate credit reporting. Usually, the practical first step is to build the record through written disputes and agency complaints.

Key Takeaways

A lending app loan opened with your IDs is not automatically your debt if you did not consent, did not apply, and did not receive the money.
Preserve screenshots, call logs, loan details, disbursement records, and messages sent to your contacts.
Dispute the account in writing and demand the full KYC, consent, device, and disbursement records.
Report lending and collection issues to the SEC, data misuse to the NPC, cybercrime or fraud to NBI or PNP, and credit record errors to the CIC.
Do not admit the debt, negotiate as if it were yours, or pay just to stop harassment without understanding the consequences.
If you are abroad, you can still act through written complaints and, when needed, an authorized representative with properly executed documents.