Quick answer

If an e-wallet account is using your mobile number without your permission, report it immediately through the e-wallet provider’s official fraud or customer-assistance channel. Ask the provider to secure or restrict the account, disassociate your number, preserve the registration and transaction records, investigate how the account was opened, and give you a written case reference.

At the same time:

Secure the SIM and the email, bank, and other financial accounts connected to the number.
Ask your telecommunications provider to confirm that the SIM is registered to you and that no unauthorized SIM replacement, eSIM activation, or porting occurred.
Preserve screenshots, messages, dates, transaction references, and every response you receive.
Report any unauthorized transfer to the financial institution from which the money originated.
Escalate an unresolved e-wallet complaint to the Bangko Sentral ng Pilipinas (BSP).
Consider complaints to the National Privacy Commission (NPC) and law enforcement if your identity, identification documents, money, or credentials were misused.

Do not try to enter, transact through, empty, or take over the disputed account merely because you receive its one-time passwords. Possession of the current SIM does not necessarily establish ownership of an e-wallet account, particularly when a mobile number has been reassigned.

First determine what may have happened

A message addressed to another person does not automatically prove that somebody recently impersonated you. Several situations are possible:

A previous subscriber opened the account. Mobile numbers can be recycled. An account may remain associated with a number after the former subscriber loses or surrenders it.
Someone entered the wrong number. The account may be incomplete or unverified.
Your number was used without your identity. The account holder may have supplied your number but different personal details.
Your personal information was impersonated. Someone may have used your name, birth date, selfie, identification document, or other information to pass verification.
Your SIM or mobile account was compromised. An unauthorized SIM replacement, eSIM activation, account recovery, or number-porting request may have allowed another person to receive authentication messages.
A genuine account of yours was taken over. This is more urgent, especially if the password, PIN, recovery email, linked bank account, or transaction history has changed.

The appropriate remedy depends on which situation the records establish. Ask the e-wallet provider to investigate instead of assuming that the name shown in a text message tells the whole story.

What to do immediately

1. Preserve the evidence before changing anything

Save evidence in its original form where possible:

Screenshots showing the sender, date, time, full message, and mobile number
Account-registration, login, password-reset, cash-in, cash-out, loan, or payment notifications
OTP messages, without sharing the OTP itself
Emails and push notifications
The e-wallet’s displayed account name, if it appeared during a legitimate transaction or in the app
Call logs and suspicious links
Evidence that the number belongs to or is currently assigned to you
SIM-registration confirmation and legitimate account records
Government IDs or documents you believe were copied
Bank or e-wallet statements showing unauthorized transactions
Customer-service case numbers, chat transcripts, and email headers
A written timeline of when you acquired the number and first discovered the problem

Do not post unredacted screenshots online. They may expose OTPs, account balances, QR codes, IDs, addresses, or transaction references.

2. Secure the mobile number

Contact your telecommunications provider through its official website, app, hotline, or store. Ask it to:

Confirm that the active SIM is registered under your correct information
Check for an unauthorized SIM replacement, eSIM issuance, or porting request
Add available security controls to the mobile account
Correct inaccurate registration information
Block or replace a lost or compromised SIM when necessary
Give you a written reference number or certification for your report, if available

Under the SIM Registration Act, Republic Act No. 11934, public telecommunications entities maintain their own SIM registers. An end-user must immediately report changes in registration information, loss of the SIM, or a request for deactivation. For a reported loss or requested deactivation, the provider must deactivate the SIM within 24 hours.

Deactivation is appropriate when the SIM is lost, stolen, or under another person’s control. If you physically possess a functioning SIM and the problem is only an old e-wallet association, ask the carrier what action is suitable before requesting deactivation. Deactivating the number can also interrupt your legitimate banking and authentication services.

3. Report the account to the e-wallet provider

Use only the provider’s verified app, website, hotline, or consumer-assistance channel. Do not rely on a phone number or link supplied in an unexpected text message.

State clearly that:

You are the current lawful user of the mobile number.
You did not open or authorize the disputed e-wallet account, if that is true.
You do not consent to your number or personal data being associated with it.
The account may involve a recycled number, mistaken entry, identity misuse, or account takeover.
You want immediate protective action and a documented investigation.

Request the following, as applicable:

Restriction of logins, transfers, withdrawals, loans, and changes to account credentials while the matter is investigated
Removal or correction of your mobile number and any other inaccurate personal data
Preservation of registration, verification, device, login, transaction, recovery, and customer-service records
Confirmation of whether your name, ID, selfie, email, address, or other information was used
A copy of personal data concerning you, subject to lawful identity verification and limits protecting another person’s data
Written confirmation of the resolution
A case reference and the provider’s expected response process

The provider may properly refuse to disclose another person’s full identity, balance, or transaction history. Your right to obtain your own personal data does not create a right to receive unrelated confidential information belonging to somebody else.

Suggested wording for the report

I am the current lawful user of mobile number [number]. I discovered that it is associated with an e-wallet account that I did not open or authorize. Please immediately secure the account, prevent further use of my number, preserve all relevant registration and activity records, and investigate whether my personal information or identification documents were used. Please correct or remove inaccurate data concerning me and provide a written case reference and resolution. I can submit proof of current control of the number and identity through your secure verification channel.

Send ID copies only through a verified, secure channel. Watermark a copy where practical—for example, “For investigation by [provider], [date], case [reference]”—without covering information the provider legitimately needs to verify.

4. Secure every account connected to the number

From a trusted device:

Change passwords for your primary email and financial accounts.
Use unique passwords rather than variations of one password.
Change e-wallet and banking PINs where compromise is possible.
Review recovery email addresses, trusted devices, biometrics, and active sessions.
Enable app-based authentication where the service supports it.
Remove unknown devices and sessions.
Check recent transactions, loans, credit applications, and account changes.
Ask your banks whether any unfamiliar e-wallet was linked to your accounts.

Never give an OTP, MPIN, password, recovery code, card verification value, or remote access to a caller claiming to “unlink” the number.

If money was transferred without authorization

Report the transaction immediately to the bank, e-wallet, or other institution from which the money originated. Give it the amount, date and time, recipient information shown to you, and transaction reference.

BSP consumer-protection rules place primary responsibility for assisting with a disputed fund transfer on the originating financial institution. The originating and receiving institutions may hold funds that remain intact, block affected accounts, investigate the transaction, or take other protective measures. The institution must formally communicate the result within three banking days after its investigation concludes. That is not a promise that the entire investigation will finish within three banking days.

Current rules under the Anti-Financial Account Scamming Act and BSP Circular No. 1215 also provide mechanisms for temporarily holding disputed funds and coordinating verification among financial institutions. Recovery is not automatic: it may depend on how quickly the matter was reported, whether funds remain traceable or intact, the evidence, and the investigation’s findings.

Do not wait for a police report before alerting the originating institution unless that institution specifically requires one for a later stage. Contractual reporting periods may be short, and delay can make tracing or preserving funds more difficult.

Your rights concerning inaccurate or misused personal data

A mobile number and information linking it to an identifiable person are personal data. Under the Data Privacy Act of 2012, Republic Act No. 10173, a data subject may, depending on the circumstances:

Be informed about the processing of personal information
Obtain access to personal information processed about them
Dispute inaccuracies and have them corrected
Object to certain processing
Seek suspension, withdrawal, blocking, removal, or destruction when the statutory conditions are met
File a complaint and seek appropriate relief for violations

These rights are not unlimited. A provider may retain information required by law, necessary for fraud prevention, needed for legal claims, or relating to another account holder. A request to “delete everything” may therefore be less effective than a precise request to restrict the account, correct the false association, preserve evidence, and explain the lawful basis for any continued retention.

When the conduct may be criminal

Opening an account under another person’s identity is not merely a customer-service problem.

The Anti-Financial Account Scamming Act covers e-wallets as financial accounts and prohibits specified conduct involving financial-account scamming, including opening a financial account under a fictitious name or using another person’s identity or identification documents.

The Cybercrime Prevention Act of 2012, Republic Act No. 10175 defines computer-related identity theft as the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion—without right—of identifying information belonging to another. Other offenses may apply when computer data are falsified, systems are accessed fraudulently, or money is taken.

Criminal liability still depends on the evidence and all legal elements. An old account associated with a recycled number, a clerical error, or an uncompleted registration is not automatically identity theft.

Reporting to law enforcement

Consider reporting promptly to the Philippine National Police Anti-Cybercrime Group, the National Bureau of Investigation’s cybercrime unit, or the nearest police or NBI office when:

Your name, selfie, signature, or ID was used
Money was stolen or transferred
Loans or credit were obtained or attempted
The disputed account is receiving suspected scam proceeds
Someone took control of your SIM or genuine e-wallet
You are being threatened, extorted, or impersonated
The provider asks for a police report
Evidence may disappear or further victims may be at risk

Bring or securely submit your chronology, screenshots, transaction references, proof of control of the number, provider and carrier case numbers, account statements, and identification. Preserve the original phone and files; avoid editing the only copies.

A barangay blotter may help document an incident locally, but it is not a substitute for reporting a cyber-enabled crime to an investigating law-enforcement agency.

Escalating an unresolved complaint to the BSP

E-money issuers and other BSP-supervised institutions must maintain a Financial Consumer Protection Assistance Mechanism. This is the first-level complaint channel.

If the provider fails to act within a reasonable period or its response is unsatisfactory:

Keep proof that you first complained to the provider.
Prepare the provider’s response, your case number, a concise chronology, supporting documents, and the specific remedy requested.
Escalate through the BSP Online Buddy on the BSP website or submit the BSP Complaint, Inquiry and Request form through an available official channel.

The BSP Consumer Assistance page lists the current channels and form. BSP Circular No. 1169 makes the institution’s assistance mechanism the first-level recourse and BSP’s Consumer Assistance Mechanism the second level. BSP consumer assistance is generally facilitative; mediation or adjudication has additional requirements. For purely civil financial claims, BSP adjudication is limited to claims for payment or reimbursement not exceeding ₱10 million, exclusive of legal interest, under BSP Circular No. 1169.

BSP escalation does not replace a police report, criminal complaint, NPC complaint, or court action when one is independently necessary.

Filing a privacy complaint with the NPC

Before filing a formal NPC complaint, ordinarily give the e-wallet provider—the personal information controller—an opportunity to address the privacy issue in writing. Keep proof of delivery and its response or failure to respond.

The NPC’s current complaint procedure permits an affected data subject to file a complaint. A formal filing generally requires a completed and notarized Complaint-Assisted Form or verified complaint, supporting evidence, and any witness affidavits. Consult the NPC’s official complaint page and the amended NPC Rules of Procedure before filing.

Do not delay while exchanging indefinite messages with the provider. Procedural time limits and exhaustion requirements can affect whether a complaint is given due course, although the NPC’s rules recognize limited exceptions, including justified cases and serious violations. If a deadline may be approaching, obtain legal advice and confirm the current filing requirements directly with the NPC.

Common mistakes to avoid

Using the OTP to enter the disputed account. This may alter evidence and could amount to unauthorized access.
Assuming the account is legally yours because the current number is yours. The number may have been reassigned.
Giving customer service more personal data than necessary through an unverified channel.
Paying a supposed “verification,” “unlinking,” or “account release” fee.
Posting the account name, QR code, phone number, ID, or OTP publicly.
Deleting messages or resetting the phone before preserving evidence.
Reporting only to the telecommunications provider. The carrier controls the SIM relationship; the e-wallet provider controls the wallet account.
Reporting only to the receiving wallet when your own funds were transferred. Also notify the originating institution immediately.
Accepting a verbal assurance without a case number or written resolution.
Demanding disclosure of another person’s complete account records. Ask for information concerning you and for investigation, restriction, correction, and preservation.
Treating every recycled-number case as a crime. Let provider records establish when and under whose verified information the account was created.

When help is urgent

Seek immediate assistance from the provider, originating financial institution, carrier, and law enforcement if:

Your SIM suddenly loses service without explanation
You receive notices of a SIM replacement, eSIM activation, or number port
Money is moving or withdrawal codes are being generated
An unfamiliar loan or credit product appears
Your email or financial accounts are being reset
Your ID or selfie is displayed in the disputed account
Scammers are directing victims to send money to the account
You face threats, extortion, arrest-related impersonation, or risk of physical harm
A large amount, business account, payroll, or funds belonging to others are involved

A Philippine lawyer may be necessary when the provider attributes the account or debt to you, substantial funds are missing, a formal demand or subpoena arrives, an NPC deadline is uncertain, or civil or criminal proceedings are being considered.

Frequently asked questions

Can I claim the e-wallet account because I now own the mobile number?

Not automatically. A mobile number may be reassigned, while the account may contain another person’s verified identity, funds, and transaction history. Report the conflict and let the provider perform a controlled account-recovery or disassociation process.

Should I enter the OTP to find out whose account it is?

No. Do not use credentials to access an account you did not open or are not certain you own. Preserve the message and report it.

Can the provider simply delete the account?

It may restrict or close the account, but it may also have legal reasons to retain registration, transaction, anti-money-laundering, fraud, complaint, or litigation records. Ask it to stop unauthorized use of your number, correct the association, and explain any continued processing.

Does SIM registration prove that the wallet belongs to me?

No. SIM registration establishes the carrier’s registration record for the SIM. E-wallet ownership and verification are separate matters maintained by the financial service provider.

What if the account was created before the number was assigned to me?

Give the provider proof showing when you acquired or reactivated the number. Ask it to remove the old association without disclosing or transferring the former user’s account data to you.

What if my name or ID was also used?

Treat the matter as possible identity misuse. Ask the provider to preserve verification records, secure all connected accounts, consider an NPC complaint, and report to law enforcement.

Will reporting guarantee that stolen money is returned?

No. Reimbursement depends on the evidence, the provider’s investigation, applicable rules and agreements, the parties’ conduct, and whether the transaction is found unauthorized or fraudulent. Fast reporting improves the chance that remaining funds can be traced or held.

Should I change my mobile number?

Usually not as the first step. Secure the existing number and investigate first. Changing it can disrupt legitimate accounts and complicate evidence. Replacement may be appropriate when the SIM or carrier account is compromised or the carrier recommends it.

Official references

This article provides general legal information, not legal advice or a prediction of any case’s outcome. The proper response may depend on the provider’s records, the history of the mobile number, the account’s verification data, and any transactions involved. Laws, regulations, and official procedures were checked as of July 27, 2026.