If you discovered that a business was registered under your name in the Philippines without your consent, treat it as a serious identity misuse problem—not a simple clerical error. It can affect your taxes, credit record, business reputation, immigration records, bank accounts, and even expose you to complaints from customers, lenders, employees, or government agencies. The right response is to verify the record, preserve evidence, make a sworn denial, notify the correct agencies, and—if there was forgery, online identity theft, or financial fraud—file the proper criminal and data privacy complaints.

What “Business Registered in My Name Without Consent” Usually Means

In the Philippines, this problem usually appears in one of these ways:

Situation	Where it usually appears	Why it matters
A sole proprietorship was registered using your name	DTI Business Name Registration System, LGU business permit, BIR	You may receive tax notices, permit obligations, or complaints from customers
A corporation lists you as incorporator, director, officer, stockholder, treasurer, or resident agent	SEC eSPARC/eSECURE, SEC records, GIS filings	You may be associated with corporate liabilities, fraud, investment scams, or regulatory filings
Your TIN was used for a fake or unauthorized business	BIR RDO, BIR registration records	You may receive open cases, tax returns, invoicing issues, or registration penalties
A bank, e-wallet, lending app, online store, or payment account was opened under a business using your identity	Banks, fintech platforms, online marketplaces	This may affect your credit history and may involve money mule or scam activity
A family member, former partner, employee, or fixer used your ID or signature	DTI, SEC, BIR, LGU, private contracts	The relationship may complicate evidence, but lack of consent is still important

A registration record by itself does not automatically prove that you truly owned, managed, or authorized the business. But government and private records can create a practical presumption that you are connected to it unless you correct the record quickly and document your denial.

First Priority: Confirm What Kind of Business Was Registered

Before filing complaints, identify exactly what was registered. Different offices handle different records.

Type of registration	Where to check	What to ask for
Sole proprietorship / business name	DTI BNRS Search or nearest DTI office / Negosyo Center	Business name certificate, owner name, registration date, territorial scope
Corporation, OPC, partnership, association	SEC iMessage complaint/ticket portal, SEC eSEARCH, Check with SEC, SEC Company Registration and Monitoring Department	Articles, certificate of incorporation, incorporators, directors, GIS, submitted IDs/signatures if available
Tax registration	BIR Revenue District Office where the business is registered; BIR eComplaint	BIR Certificate of Registration, registered trade name, tax types, open cases
Mayor’s permit / local business permit	City or municipal Business Permits and Licensing Office (BPLO)	Permit application, declared owner, address, uploaded IDs
Data privacy breach	National Privacy Commission complaint process	Complaint form, notarized complaint, proof of unauthorized processing
Cybercrime / online fraud	NBI Cybercrime Division, PNP Anti-Cybercrime Group, DOJ Office of Cybercrime	Cybercrime complaint, screenshots, URLs, account details, transaction records

For DTI sole proprietorships, the business name system is based on Act No. 3883, the Business Name Law, which regulates the use of business names other than a person’s true name. The DTI’s own BNRS materials explain that a business name is a name used in connection with receipts, agreements, signs, or business transactions, and DTI rules prohibit names that are deceptive, misleading, or names of other persons. The DTI also states that business name registrations are generally valid for five years, subject to cancellation under the rules. (Lawphil)

For corporations and partnerships, the SEC record is especially important. Under Republic Act No. 11232, the Revised Corporation Code of the Philippines, a private corporation starts its juridical personality when the SEC issues the certificate of incorporation. The SEC also has authority to investigate alleged violations of the Code, rules, regulations, or orders. (Supreme Court E-Library)

Legal Basis: What Laws May Have Been Violated?

Unauthorized business registration can involve several overlapping laws. The correct theory depends on the documents used, whether your signature was forged, whether money was taken, and whether online accounts or personal data were involved.

1. Falsification under the Revised Penal Code

If someone forged your signature, used fake IDs, submitted false documents, or made it appear that you consented to be an owner, incorporator, director, officer, or authorized representative, the act may fall under falsification provisions of the Revised Penal Code.

The most relevant provisions are:

Article 171 — falsification by public officers, employees, or notaries;
Article 172 — falsification by private individuals and use of falsified documents;
Article 315 — estafa or swindling, if deception caused another person to part with money or property.

In Luis L. Co and Alvin S. Co v. People, the Supreme Court explained that when a private document is falsified to commit fraud, courts must carefully determine whether the proper charge is falsification of a private document or estafa. The Court also restated that falsification of a private document requires proof of falsification, that the document was private, and that damage was caused or intended. (Supreme Court E-Library)

2. Cyber identity theft under RA 10175

If the person used online registration portals, email accounts, uploaded IDs, digital signatures, e-wallets, social media pages, or online marketplaces, Republic Act No. 10175, the Cybercrime Prevention Act of 2012, may apply. The law includes computer-related identity theft, referring to the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another. (Lawphil)

This matters because many DTI, SEC, BIR, banking, and e-commerce processes now happen online. Screenshots, emails, IP logs, OTP records, uploaded ID copies, and platform verification records can become important evidence.

3. Data Privacy Act violations under RA 10173

Your name, address, birthdate, TIN, ID numbers, signature, passport, and contact details are personal information. Some, like government ID numbers and tax information, may be sensitive personal information.

Under Republic Act No. 10173, the Data Privacy Act of 2012, unlawful or unauthorized processing, disclosure, or misuse of personal data can lead to administrative, civil, and criminal consequences. The National Privacy Commission requires formal complaints to follow a specific format, be notarized, and be submitted in person, by courier, or by scanned email. (National Privacy Commission)

4. Civil liability for damages

Even when criminal prosecution takes time, you may have civil remedies under the Civil Code.

The usual bases are:

Article 19 — everyone must act with justice, give everyone their due, and observe honesty and good faith;
Article 20 — a person who, contrary to law, causes damage must indemnify the injured party;
Article 21 — a person who willfully causes loss or injury contrary to morals, good customs, or public policy must compensate the injured party;
Article 26 — protects dignity, personality, privacy, and peace of mind;
Article 2176 — quasi-delict, when fault or negligence causes damage without a pre-existing contract.

These provisions may support claims for actual damages, moral damages, exemplary damages, attorney’s fees, injunction, or correction of records, depending on the evidence. (Lawphil)

5. Anti-Financial Account Scamming Act if bank or e-wallet accounts were involved

If the fake business was used to open bank accounts, e-wallets, payment gateways, or accounts that received scam proceeds, Republic Act No. 12010, the Anti-Financial Account Scamming Act (AFASA) of 2024, may be relevant. AFASA covers prohibited acts involving financial accounts and recognizes investigation and enforcement mechanisms involving financial institutions and regulators. (Lawphil)

This is especially important if people are messaging you because “your business” supposedly received money, sold fake items, recruited investors, or collected payments.

6. Anti-Dummy Law issues for foreigners and Filipino nominees

If your Filipino name was used to hide foreign ownership in a business subject to nationality restrictions, the Anti-Dummy Law, Commonwealth Act No. 108, may be implicated. This is common in real estate, landholding, public utilities, certain mass media or advertising structures, and other restricted sectors.

Foreign investors may own up to 100% of many domestic market enterprises unless the Constitution, statutes, or Foreign Investment Negative List restrict the activity. But using a Filipino as a dummy, nominee, or paper owner to evade restrictions is dangerous for both the foreigner and the Filipino whose name is used. (Lawphil)

Step-by-Step: What to Do Immediately

1. Do not ignore the registration

Even if you never signed anything, the record can still create practical problems. You may later receive:

BIR open cases or tax notices;
LGU business tax assessments;
customer complaints;
subpoenas or demand letters;
bank collection calls;
lending app or credit bureau entries;
SEC, DTI, or barangay notices;
police or NBI inquiries if the business was used in a scam.

Your goal is to create a clear paper trail showing that you discovered the unauthorized registration, denied it promptly, and asked the proper offices to correct, cancel, annotate, or investigate the record.

2. Gather evidence before confronting anyone

Preserve the record first. Do not rely on memory or screenshots without dates.

Collect:

screenshots showing the business name, owner/officer name, registration number, URL, and date;
copies or certified true copies of DTI, SEC, BIR, or LGU records;
emails, text messages, OTP messages, account alerts, and platform notices;
demand letters or complaints you received;
proof you were abroad, employed elsewhere, hospitalized, or otherwise unable to sign or appear;
copies of your real IDs used during the relevant period;
specimen signatures from official records;
proof of your actual residence and contact details;
any police blotter, barangay record, or previous identity theft report.

If the record involves a corporation, try to get the Articles of Incorporation, bylaws, certificate of incorporation, General Information Sheet, and any document where your name or signature appears.

3. Prepare a notarized Affidavit of Denial and Non-Consent

This is usually the central document. It should be factual, specific, and consistent.

Your affidavit should state:

Your full legal name, citizenship, address, birthdate, and government ID details.
The exact business name, registration number, address, and agency record you discovered.
That you did not apply for, sign, authorize, consent to, own, manage, fund, or benefit from the business.
That you did not issue a Special Power of Attorney, authorization letter, board consent, secretary’s certificate, or digital authority.
That any signature, ID upload, email, phone number, or address attributed to you was unauthorized, false, forged, or misused, if true.
When and how you discovered the registration.
What documents are attached.
What action you are requesting: cancellation, correction, annotation, investigation, preservation of records, and disclosure of submitted documents to the proper authorities.

Use careful wording. If the record is fake, avoid language that sounds like you are voluntarily “closing my business.” Instead, say something like:

“Without admitting ownership, participation, authorization, or liability, I respectfully request the cancellation, correction, annotation, or investigation of the registration made under my name without my consent.”

That wording matters because some closure forms were designed for real business owners. You do not want your correction request to look like an admission that you actually operated the business.

4. Notify the specific agency in writing

Send written notices to every office where the fake record appears.

If it is a DTI sole proprietorship

Go to the nearest DTI office or Negosyo Center, or use BNRS contact channels. The DTI FAQ states that business name cancellation may be applied for at selected DTI offices, and that DTI may cause mandatory cancellation after due notice and hearing for grounds under DAO 18-07 or upon final order of an administrative body, court, or tribunal. (BNRS)

Submit:

notarized Affidavit of Denial and Non-Consent;
copy of valid ID;
proof of the unauthorized business name registration;
request for certified records;
request for cancellation or annotation due to identity misuse;
request to preserve application logs, uploaded IDs, emails, and payment records.

If it is an SEC corporation, OPC, or partnership

File a ticket or complaint through the SEC’s official channels, including SEC iMessage. The SEC iMessage portal accepts issues and complaints and provides ticket tracking. (imessage.sec.gov.ph)

Ask the SEC to:

provide or allow access to documents where your name appears;
preserve registration submissions, e-signature records, IDs, email addresses, and eSECURE/eSAP records;
annotate or investigate the unauthorized listing of your name;
refer the matter internally if false statements or fraudulent submissions were made.

The SEC’s eSPARC system also describes eSECURE as using eKYC to establish identity and reachability of persons behind companies, and eSAP as allowing remote signing by incorporators, partners, and resident agents. If someone used those systems under your name, ask SEC to preserve the related identity verification trail. (Esparc)

If it appears in BIR records

Go to the RDO where the business is registered. Bring a written request and your affidavit. If you do not know the RDO, use BIR assistance channels or TIN validation tools.

BIR Form No. 1905 is used for registration information update, correction, and cancellation. The October 2025 BIR Form 1905 includes options for correction/change/update of registration information, change of trade name, change or addition of registered activity, and closure or cessation of registration of business. It also lists documentary requirements for closure, cancellation, and updates.

Ask the BIR to:

verify whether your TIN was used;
identify the RDO and registered trade name;
flag the registration as disputed or unauthorized;
give you a list of open cases, tax types, invoices, receipts, and returns filed;
guide you on the correct form or written procedure for correction/cancellation due to identity theft;
receive your affidavit and attachments.

If you receive a Letter of Authority, assessment, open case notice, or subpoena, respond within the deadline. Do not assume that “I never owned this” will be accepted unless it is properly documented.

If there is an LGU mayor’s permit

File with the Business Permits and Licensing Office of the city or municipality where the business address is located.

Request:

certified copy of the permit application;
copies of IDs and authorization letters submitted;
inspection records;
cancellation, revocation, or annotation of the permit;
preservation of CCTV, application logs, and payment records, if available.

LGUs often require coordination with DTI, SEC, and BIR, so bring copies of your filings with those agencies.

5. File a criminal complaint if there was forgery, fraud, or online identity theft

You may file with:

NBI Cybercrime Division;
PNP Anti-Cybercrime Group;
local police, if there are physical documents or local suspects;
Office of the City or Provincial Prosecutor, through a complaint-affidavit.

Bring printed and digital copies of evidence. For online matters, include URLs, usernames, email headers, phone numbers, transaction IDs, platform names, and screenshots showing date and time.

For forged signatures, the NBI Questioned Documents Division or appropriate forensic examination may become relevant, especially if the case depends on comparing signatures.

6. File a National Privacy Commission complaint if your personal data was misused

A privacy complaint is useful when your ID, TIN, address, signature, phone number, email, or image was collected, uploaded, disclosed, or processed without authority.

The NPC requires a specific complaint format and notarization. The complaint can be submitted in person, by courier, or by scanned email, following the NPC’s published complaint process. (National Privacy Commission)

Attach:

your affidavit;
screenshots and certificates;
proof of unauthorized data use;
copies of correspondence with DTI, SEC, BIR, LGU, bank, or platform;
proof of harm, such as collection calls, credit denial, public posts, or threats.

7. Check downstream damage: banks, credit, platforms, and government accounts

Unauthorized business registrations often connect to other records.

Check:

bank accounts and e-wallets opened using your identity;
online selling accounts;
lending app records;
payment gateways;
invoices or receipts issued under your name;
CIC credit report;
SSS, PhilHealth, Pag-IBIG employer records, if the fake business supposedly hired workers;
BIR open cases and tax filings.

The Credit Information Corporation explains that a credit report summarizes financial transactions submitted to the CIC under RA 9510. If a fake business was used to get loans or credit lines, checking your credit report can help identify damage early. (Credit Information Corporation)

Documents You Will Usually Need

Document	Purpose	Notes
Valid government ID	Proves your identity	Use a clear copy; watermark “For identity theft complaint only” when appropriate
Notarized Affidavit of Denial and Non-Consent	Main sworn denial	Attach proof; use consistent facts across agencies
Proof of unauthorized registration	Shows the record exists	Screenshots, certificates, SEC/DTI/BIR/LGU copies
Signature specimens	Helps disprove forged signatures	Passport, bank card forms, old government forms, contracts
Proof of location or impossibility	Shows you could not have signed or appeared	Passport stamps, travel records, employment certificate, medical records
Police/NBI/PNP report	Supports agency correction and private disputes	More important if fraud, scams, or online accounts are involved
NPC complaint form	For personal data misuse	Must follow NPC format and notarization rules
SPA for representative	If someone files for you	Required if you are abroad or cannot appear personally
Apostilled or consularized documents	For OFWs and foreigners abroad	Requirements depend on the country where the document is signed

Practical Timelines and Bottlenecks

Stage	Typical timing	Common bottleneck
Initial verification from online portals	Same day to several days	Incomplete public details; need certified copies
DTI/SEC/BIR/LGU receiving of complaint	Same day to 2 weeks	Correct office or RDO must be identified
Certified copy requests	Several days to weeks	Privacy limits; need proof of interest
BIR correction or disputed cancellation	Weeks to months	Open cases, invoices, tax types, wrong RDO, missing documents
NPC complaint processing	Months	Formal requirements, notarization, evidence of unauthorized processing
NBI/PNP investigation	Months or longer	Identifying the real user, platform logs, bank records, warrants
Prosecutor preliminary investigation	Months or longer	Counter-affidavits, hearings, documentary proof
Court action for damages or injunction	Longer-term	Filing fees, service of summons, trial delays

A common practical problem is that one office will ask for proof from another. For example, BIR may want DTI or SEC records; LGU may want BIR or DTI action; SEC may ask for a sworn complaint; banks may want police or NBI reports. Keep a complete file and ask each office to stamp your receiving copy.

Special Notes for OFWs, Filipinos Abroad, and Foreigners

If you are outside the Philippines

You can usually act through a representative using a Special Power of Attorney. The SPA and affidavit may need to be:

signed before a Philippine Embassy or Consulate; or
notarized locally and apostilled by the competent authority if the country is an Apostille Convention country; or
legalized/consularized if the country is not covered by apostille rules.

For example, Philippine Embassy guidance commonly explains that private documents such as affidavits and SPAs executed abroad may be notarized/consularized before the embassy or notarized locally and apostilled, depending on the country and document type. (Philippine Embassy)

If you are a foreigner

A foreigner’s name may appear in Philippine business records in several legitimate ways: investor, stockholder, director if allowed, resident agent, branch representative, or sole proprietor if authorized under foreign investment rules. But if you did not consent, the response is the same: verify, deny under oath, and request correction.

For foreign corporations, the Revised Corporation Code requires a license to transact business in the Philippines, along with authenticated corporate documents and a resident agent. If your name was used as a resident agent or representative without consent, notify the SEC immediately. (Supreme Court E-Library)

If your Filipino name was used as a “dummy”

This is serious. Do not sign “fixing” documents that make it appear you agreed to act as nominee. File a denial and preserve communications showing that your name was used without authority. If you did knowingly allow your name to be used to evade nationality restrictions, the issue becomes more complicated because the Anti-Dummy Law can impose consequences on both the foreign beneficiary and the Filipino dummy.

Common Mistakes That Make the Problem Worse

Mistake 1: Signing closure forms as if you owned the business

If you truly never owned or authorized the business, avoid signing documents that say or imply “I am closing my business” unless your cover letter clearly states that the filing is made without admitting ownership, authorization, or liability.

Mistake 2: Paying taxes or penalties without written protest

Sometimes people pay just to “make it go away.” Payment can later be misunderstood as acknowledgment. If payment is unavoidable to stop immediate harm, document that it is made under protest and without admission.

Mistake 3: Only filing a barangay blotter

A barangay blotter can help show the date of discovery, but it usually does not cancel DTI, SEC, BIR, or LGU records. Also, many fraud, falsification, and cybercrime issues are outside ordinary barangay conciliation because of the nature and penalty of the offense.

Mistake 4: Confronting the suspected person before preserving evidence

Once confronted, the person may delete accounts, change passwords, abandon addresses, or destroy documents. Preserve records first.

Mistake 5: Ignoring BIR notices

Even if the registration is fake, BIR deadlines matter. Respond in writing. Ask for correction, cancellation, or annotation, but do not ignore letters, open cases, or assessment notices.

Mistake 6: Using one affidavit with vague details

A weak affidavit saying only “I did not authorize this” may not be enough. Include dates, registration numbers, addresses, screenshots, document titles, and specific denials.

What If the Person Who Used Your Name Is a Spouse or Relative?

This happens often: a spouse registers a sari-sari store, online shop, lending activity, trucking business, or corporation using the other spouse’s name because “family naman.”

Under Article 73 of the Family Code, as amended by RA 10572, either spouse may exercise a legitimate profession, occupation, business, or activity without the consent of the other. But that does not authorize one spouse to forge the other spouse’s signature, use the other’s TIN, upload the other’s ID, or make the other appear as the owner without consent. (Supreme Court E-Library)

Be aware of Article 332 of the Revised Penal Code, which creates special rules for certain property crimes like theft, swindling, and malicious mischief among close family members. It does not automatically erase issues involving falsification, data privacy, cybercrime, regulatory violations, or civil correction of government records. (Lawphil)

Frequently Asked Questions

Can someone legally register a business under my name without my permission?

No. A person may not lawfully use your identity, signature, TIN, government ID, or personal data to make it appear that you own or authorized a business. Depending on the facts, this may involve falsification, identity theft, data privacy violations, estafa, or civil liability.

Am I automatically liable for the business debts?

Not automatically. Creditors, customers, and agencies may initially rely on the registration record, but you can dispute liability by proving lack of consent, forged signatures, unauthorized data use, and absence of participation or benefit. The faster you create a written record of denial, the better.

Can I ask DTI or SEC to cancel the registration immediately?

You can ask, but agencies usually need a written request, affidavit, supporting documents, and sometimes notice or hearing before cancellation or annotation. DTI rules allow cancellation in specific situations, and SEC may investigate false or fraudulent filings. The process is not always instant.

What should I do if BIR says a business is registered under my TIN?

Ask the RDO for the registration details, tax types, open cases, trade name, address, and documents submitted. File a notarized Affidavit of Denial and request correction, cancellation, or annotation. Use BIR Form 1905 or another RDO-directed procedure only with wording that avoids admitting ownership if the registration was unauthorized.

Should I file with NBI or PNP?

Yes, if there was forgery, online registration, fake IDs, scam activity, bank accounts, e-wallets, loans, or digital platforms involved. NBI or PNP records can also help when dealing with BIR, banks, lending apps, online marketplaces, or the NPC.

What if the business was used to scam people?

Preserve all complaints, messages, transaction records, and account details. File with NBI/PNP and notify the relevant agency or platform. If financial accounts were used, notify the bank, e-wallet, or payment provider immediately because AFASA and BSP-related processes may become relevant.

Can I sue for damages?

Yes, if you suffered actual loss, reputational harm, emotional distress, credit damage, business disruption, or expenses because of the unauthorized registration. Possible bases include the Civil Code provisions on human relations, privacy, abuse of rights, and quasi-delict, as well as civil liability arising from criminal acts.

Do I need a lawyer to file the first reports?

For initial agency reports, many people file directly with DTI, SEC, BIR, LGU, NPC, NBI, or PNP using affidavits and documents. However, if there are tax assessments, criminal counter-allegations, large debts, corporate fraud, immigration issues, or court filings, legal representation becomes much more important.

What if I am abroad and cannot appear personally?

Execute an affidavit and SPA abroad. Depending on the country, the documents may need consular notarization or local notarization with apostille. Send originals by courier to your Philippine representative, and keep scanned copies for online submissions.

How can I stop this from happening again?

Limit sharing of IDs and TIN, watermark ID copies, avoid sending unprotected photos of IDs through chat, use separate email addresses for government accounts, secure OTP devices, check DTI/SEC/BIR records if you receive suspicious notices, and monitor bank, e-wallet, and credit records.

Key Takeaways

A business registered in your name without consent should be handled as identity misuse, not just an administrative mistake.
Verify whether the record is with DTI, SEC, BIR, LGU, banks, e-wallets, or online platforms.
Prepare a detailed notarized Affidavit of Denial and Non-Consent.
Do not sign closure or correction documents in a way that admits ownership if the registration was unauthorized.
Notify every affected agency in writing and keep stamped receiving copies.
File with NBI, PNP, NPC, banks, or prosecutors when there is forgery, cyber identity theft, financial fraud, or personal data misuse.
Respond to BIR and court notices promptly, even if the registration is fake.
OFWs and foreigners may need apostilled or consularized affidavits and SPAs for use in the Philippines.