Receiving online shopping orders in your name and address can be frightening, especially when riders demand cash-on-delivery payment, sellers message you repeatedly, or the package label contains your personal details. In the Philippines, this usually points to identity misuse, prank orders, failed scam attempts, or possible leakage of personal information. The right response is not to panic or pay automatically, but to document the incident, refuse unauthorized deliveries, secure your accounts, notify the platform or seller, and report the matter when there is fraud, harassment, or repeated use of your identity.

Is It Illegal for Someone to Use Your Name and Address for Online Shopping?

Yes, it can be illegal depending on what the person did and why.

Using another person’s name and address is not a harmless joke when it causes unwanted deliveries, demands for payment, harassment, financial loss, reputational damage, or misuse of personal data. In Philippine law, the conduct may involve several overlapping issues:

Situation	Possible legal issue
Someone ordered COD items using your name and address without your consent	No valid contract on your part; possible fraud or harassment
Someone used your online shopping account	Unauthorized access, identity misuse, possible cybercrime
Someone used your phone number, email, ID, or payment details	Data privacy violation, identity theft, access device fraud
A seller or platform keeps processing your data after being told the order is unauthorized	Possible Data Privacy Act issue
A person repeatedly sends fake deliveries to annoy or embarrass you	Possible civil liability, unjust vexation, or harassment depending on facts
A scammer used your address to receive goods paid with stolen payment details	Possible cybercrime, estafa, or access device fraud

The key point is this: you are generally not required to pay for an order you did not make or authorize.

Are You Liable to Pay for Online Orders You Did Not Place?

Usually, no.

Under the Civil Code of the Philippines, an obligation must come from a recognized legal source such as law, contract, quasi-contract, crime, or quasi-delict. A sales contract also requires consent, a definite object, and cause or consideration. If you did not order the item, authorize someone to order for you, use the account, or agree to pay, the seller or courier cannot simply treat you as the buyer just because your name and address appear on the waybill. See the Civil Code provisions on obligations and contracts in Republic Act No. 386. (Lawphil)

Online orders can be legally valid in the Philippines because electronic documents and electronic data messages are recognized under the Electronic Commerce Act of 2000, Republic Act No. 8792. But that does not mean every online order bearing your name is automatically yours. The issue is still whether the electronic order can be properly attributed to you or to someone authorized by you. RA 8792 also recognizes that electronic messages should be evaluated based on reliability, authentication, and whether the recipient knew or should have known that the message was not properly attributable to the supposed sender. (Lawphil)

What to Say to the Rider or Courier

If a delivery arrives and you did not order it, say clearly:

“I did not order this item. I do not authorize this transaction. Please mark it as refused or unauthorized delivery.”

Do not argue with the rider. Most riders are only following the delivery app’s instructions and may also be victims of the scam. Ask politely to see the waybill or delivery screen, then record the details without taking possession of the item.

Do Not Sign or Pay “Just to Avoid Trouble”

Avoid doing any of the following unless you are sure the order is yours:

Paying a COD amount “temporarily”
Signing a delivery receipt
Presenting your ID to prove you are not the buyer
Opening the parcel before refusal
Accepting the package “for investigation”
Sending money to the rider, seller, or supposed platform agent outside the app

Payment or acceptance can make the situation harder to dispute later, especially if the seller argues that the item was delivered and received.

Legal Bases That May Apply in the Philippines

Cybercrime: Computer-Related Identity Theft and Fraud

If the person used information and communications technology to misuse your identity, the Cybercrime Prevention Act of 2012, Republic Act No. 10175, may apply.

Two provisions are especially relevant:

Computer-related identity theft — the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another person without right.
Computer-related fraud — unauthorized input, alteration, or deletion of computer data or program, or interference in a computer system, resulting in damage or financial benefit with fraudulent intent.

A fake online shopping order may become a cybercrime issue if the offender used your account, email, phone number, personal details, login credentials, screenshots of your ID, or other identifying information without authority. (Lawphil)

Estafa or Swindling Under the Revised Penal Code

Article 315 of the Revised Penal Code penalizes estafa, also called swindling, when a person defrauds another through deceit or abuse of confidence. In fake online order cases, estafa may be relevant if the offender deceived a seller, courier, platform, payment provider, or victim into releasing goods, money, or services.

For example:

A person orders expensive goods using your name but intends to intercept the package.
A scammer uses your address as a drop-off point for goods purchased with stolen payment details.
A person pretends to be you and induces a seller to release items on credit.

Not every prank order is automatically estafa. There must be deceit and damage capable of being proven by evidence.

Falsification of Documents

If the person used fake IDs, forged authorization letters, fabricated receipts, altered proof of payment, or falsified commercial documents, Article 172 of the Revised Penal Code on falsification by private individuals may also be relevant. This commonly arises when a scammer uses someone else’s identity documents to receive parcels, claim refunds, or mislead sellers. (Lawphil)

Data Privacy Act: Misuse of Your Personal Information

Your name, address, phone number, email address, account ID, delivery history, and order details are personal information. If they are collected, stored, shared, or used without a lawful basis, the Data Privacy Act of 2012, Republic Act No. 10173, may apply. The law protects personal information in government and private-sector information systems and created the National Privacy Commission. (National Privacy Commission)

This matters in online shopping incidents because platforms, sellers, logistics providers, payment processors, and call centers process personal data. Once you notify them that an order is unauthorized, they should handle your complaint carefully, limit unnecessary disclosure, preserve relevant records, and avoid continuing to misuse your data.

You may have privacy-related remedies if:

Your personal details were exposed in a seller group or rider group.
A seller publicly posts your name, address, or phone number to shame you.
A platform refuses to act on repeated unauthorized orders.
A company discloses your delivery details to the wrong person.
Your account was accessed because of weak security or a suspected breach.

Access Device Fraud: Credit Cards, Debit Cards, E-Wallets, and Account Numbers

If your credit card, debit card, bank account, e-wallet, OTP, voucher wallet, or payment credentials were used, the issue may involve the Access Devices Regulation Act of 1998, Republic Act No. 8484, as amended by Republic Act No. 11449. An “access device” includes cards, account numbers, codes, PINs, and other means of account access used to obtain money, goods, services, or value. (Lawphil)

Report this immediately to your bank, e-wallet provider, or card issuer. Financial institutions often have short internal timelines for fraud review, chargebacks, and temporary card blocking.

Civil Liability for Privacy Invasion, Harassment, or Damage

Even if the act does not clearly fit a criminal offense, the Civil Code may provide civil remedies.

Article 26 of the Civil Code protects dignity, personality, privacy, and peace of mind. Articles 19, 20, and 21 are often used as bases for damages when a person abuses a right, violates the law, or causes injury in a manner contrary to morals, good customs, or public policy. (ChanRobles Law Firm)

This can matter when someone repeatedly sends fake orders to your house, causes embarrassment with neighbors or building security, triggers collection messages, or exposes your personal information online.

What to Do Immediately: Step-by-Step Guide

1. Refuse the Delivery Clearly

For COD orders you did not place, refuse the package. Ask the rider to mark it as:

“Refused”
“Unauthorized order”
“Buyer denies placing order”
“Wrong/fraudulent order”

Do not sign as receiver. Do not pay. Do not accept the parcel just to inspect it unless the platform specifically instructs you in writing through the official app or help center.

2. Record the Delivery Details

Before the rider leaves, politely record the available details:

Date and time of delivery attempt
Courier company
Rider name or rider ID, if visible
Tracking number
Order number
Seller name or shop name
Platform used, such as Shopee, Lazada, TikTok Shop, Facebook Marketplace, or independent website
Amount demanded
Photo of waybill, if the rider allows it
Screenshot of any SMS, call log, app notification, or chat message

Avoid posting the rider’s face, phone number, or personal details online. The rider may not be the offender.

3. Check Whether Your Account Was Compromised

Open the official shopping app or website directly. Do not click suspicious links sent by SMS or chat.

Check:

Order history
Recently added addresses
Recently added phone numbers
Linked payment methods
Login activity, if available
Saved cards or e-wallet links
Vouchers, wallet balance, or refunds
Messages with sellers

If you see unfamiliar activity, change your password immediately and enable two-factor authentication if available.

4. Secure Your Email, Phone, and Payment Accounts

Many online shopping scams start outside the shopping app. Secure the accounts connected to your shopping profile:

Change your email password.
Change your shopping app password.
Change your e-wallet or banking app password.
Remove unknown devices.
Block or replace compromised cards.
Report unauthorized charges to your bank or e-wallet provider.
Save screenshots before the platform removes suspicious transactions.

If your SIM, email, or OTPs may have been compromised, contact your telco or service provider quickly.

5. Report the Order to the Platform or Seller

Use only the official app help center, website, verified business email, or official customer service channel.

Your report should include:

“I did not place or authorize this order.”
“My name/address/phone number was used without consent.”
“Please cancel, block, or investigate the order.”
“Please preserve records, including account, IP, device, payment, chat, and delivery logs.”
“Please confirm in writing that I am not liable for the order.”

Keep your message calm and factual. Avoid threats. Your goal is to create a clear written record.

6. File a Barangay or Police Blotter if the Incident Is Repeated or Serious

A blotter is not a criminal case by itself. It is an official record of an incident. It can help establish a timeline if the conduct continues.

Consider a barangay or police blotter when:

Deliveries happen repeatedly.
Riders or sellers keep coming to your home.
Someone is using your address as a drop-off point.
You are being threatened or harassed.
Your neighbors, landlord, condo admin, or employer are being contacted.
You suspect a known person is doing it to intimidate you.

Bring printed screenshots, photos of waybills, call logs, and a valid ID.

7. Report Cybercrime or Identity Theft to Proper Authorities

If there is account hacking, payment fraud, identity theft, use of your credentials, or organized scam activity, report to cybercrime authorities.

Relevant channels include:

Office	When it helps	Practical notes
NBI Cybercrime Division	Account compromise, online fraud, identity theft, payment-related scams	The NBI Citizens Charter describes investigative assistance for victims of computer crimes and indicates no fee for the initial complaint step. (National Bureau of Investigation)
PNP Anti-Cybercrime Group or nearest police station	Urgent threats, repeated cyber harassment, local suspects, immediate police assistance	Bring printed and digital evidence. Ask how to preserve the complaint reference number.
DOJ Office of Cybercrime	Cybercrime reports, referrals, and coordination concerns	The DOJ Office of Cybercrime acts on cybercrime complaints and referrals. (Department of Justice)

For serious cases, prepare both printed copies and electronic copies of evidence. Do not edit screenshots except to organize them. Keep original files because metadata can matter.

8. File a Privacy Complaint if Personal Data Was Misused

If the main issue is misuse, exposure, or mishandling of your personal data by a company, platform, seller, or logistics provider, the National Privacy Commission may be relevant.

The NPC’s complaint process generally requires a formal complaint in the required format, printing and filling out the form, notarization, and submission in person, by courier, or by scanned email to the NPC. The NPC also publishes complaint mechanics and rules on who may file. (National Privacy Commission)

Use this route especially when:

The platform ignores repeated reports.
The seller publicly posts your personal details.
Your address or phone number is being shared without authority.
A company refuses to correct or delete wrong personal data.
You suspect a data leak from a merchant, workplace, condo, school, or service provider.

9. File a DTI Consumer Complaint When the Seller or Platform Is the Problem

If the issue involves an online seller, refund, unauthorized transaction handling, deceptive selling practice, or refusal to assist, the Department of Trade and Industry may help. The DTI has a Consumer Complaints Assistance and Resolution system for business-to-consumer complaints, and its e-commerce FAQ says complaints against online sellers may be sent to the DTI Fair Trade Enforcement Bureau, with the DTI e-commerce office copied. (DTI Consumer Care System)

DTI is most useful when the seller or platform is identifiable and the problem concerns consumer protection. DTI is not a substitute for NBI or PNP when the issue is hacking, identity theft, or criminal fraud.

Evidence Checklist

Keep one folder for everything. Good evidence often decides whether a platform, bank, barangay, police officer, prosecutor, or agency can act.

Evidence	Why it matters
Waybill photo	Shows name, address, tracking number, seller, courier, and amount
Order screenshots	Shows platform activity and unauthorized transaction details
Chat messages	Shows seller demands, threats, admissions, or refusal to help
SMS and call logs	Shows repeated contact or harassment
Bank/e-wallet records	Shows unauthorized charges or attempted payments
CCTV or building logbook	Shows delivery attempts and riders
Written complaint to platform	Shows you gave notice that the order was unauthorized
Blotter or incident report	Establishes timeline and seriousness
Valid ID	Usually required when filing reports
Affidavit	Useful for formal complaints, agency filings, or prosecutor’s office

Sample Message to an Online Shopping Platform

I am reporting an unauthorized order using my name and delivery address. I did not place, approve, receive, or authorize this transaction. Please cancel or tag the order as fraudulent, confirm that I have no payment liability, and preserve the relevant records, including account details, device/login logs, IP logs if available, payment method, seller communications, and delivery records. Please also prevent further use of my name, address, and phone number for unauthorized orders.

Sample Message to a Seller or Courier

I did not order this item and I do not authorize this transaction. Please do not deliver or collect payment from me. Kindly mark the delivery as refused due to unauthorized use of my name and address, and coordinate with the platform for investigation.

Common Scenarios and What They Mean

Someone Keeps Sending COD Orders to My House

This is common in prank-order harassment, revenge by a known person, or scams involving fake seller accounts. Refuse each delivery, record the tracking details, and report repeated incidents to the platform and barangay or police. A single mistaken order may be an error; repeated orders suggest intentional misuse.

The Rider Says I Must Pay Because My Name Is on the Parcel

You can calmly refuse. Your name on a waybill is not proof that you consented to buy the item. Do not let pressure at the gate force you into paying. Ask the rider to return the item through the courier’s failed-delivery process.

The Seller Threatens to Post Me Online as a “Bogus Buyer”

A seller who posts your name, address, phone number, photo, or private messages may create a separate data privacy or civil liability issue. Screenshot the threat and report it to the platform. If the seller actually posts your details, save the URL, screenshots, date, time, and account name before reporting.

The Order Was Paid Online, but Sent to My Address

This is more suspicious than ordinary COD prank orders. It may involve stolen payment details, refund fraud, triangulation scams, or use of your address as a drop point. Do not accept the item. Report it to the platform and consider reporting to cybercrime authorities, especially if multiple paid parcels arrive.

A Family Member Used My Name Without Permission

Start with facts. If a household member ordered using your name but intended to pay, it may be a private family issue. But if they used your account, payment method, ID, or personal data without consent, or caused debts and harassment, the same legal concerns may apply. Preserve evidence before confronting the person if you expect denial or retaliation.

I Am a Foreigner Living in the Philippines

Foreigners can report unauthorized use of their name and Philippine address. Bring your passport, ACR I-Card if applicable, lease or proof of residence, screenshots, and delivery records. If documents are executed abroad for use in the Philippines, notarization, apostille, or consular authentication may be required depending on where the document was issued and where it will be used. The DFA’s Apostille information explains authentication requirements for documents used across borders. (Apostille Philippines)

I Am a Filipino Abroad and Someone Is Using My Philippine Address

Ask a trusted person at the address to refuse the deliveries and collect evidence. If you need someone in the Philippines to file reports or request documents for you, they may need an authorization letter or Special Power of Attorney. For formal use in the Philippines, documents signed abroad often need notarization and apostille or consular processing depending on the country and receiving office.

When Should You Escalate the Matter?

Escalate beyond platform customer service when any of these happens:

More than one unauthorized order arrives.
Your payment method was used.
Your account was accessed.
The seller or rider threatens you.
Your address is being used repeatedly as a delivery point.
Your personal details are posted online.
You suspect identity documents were used.
The platform refuses to provide meaningful assistance.
The incident affects your work, immigration status, landlord, condo, or family safety.

Frequently Asked Questions

Can I refuse a cash-on-delivery order in my name if I did not order it?

Yes. If you did not place or authorize the order, you may refuse delivery. Tell the rider clearly that it is unauthorized and ask that it be marked as refused or fraudulent.

Can the seller sue me for not paying a fake order?

A seller would generally need to prove that you actually ordered, authorized, received, or benefited from the item. Your name and address on a waybill alone should not be treated as conclusive proof of a valid contract.

Should I pay first and ask for a refund later?

Usually no. Paying can make the dispute more complicated. It is safer to refuse the unauthorized delivery and report it through official channels.

What if the rider gets angry or insists that I accept the package?

Stay calm and avoid confrontation. Repeat that you did not order it. If the rider refuses to leave, call building security, barangay assistance, or the nearest police station depending on the situation.

Is using someone’s name and address considered identity theft in the Philippines?

It can be, especially when identifying information is intentionally acquired, used, or misused without right through a computer system or online platform. RA 10175 specifically penalizes computer-related identity theft.

Can I file a complaint with the National Privacy Commission?

Yes, if your personal information was misused, exposed, mishandled, or processed without proper basis by a personal information controller such as a platform, seller, courier, or company. Formal NPC complaints usually require the proper form and notarization.

Should I report to DTI, NBI, PNP, or NPC?

It depends on the problem. Report seller or platform consumer issues to DTI. Report hacking, identity theft, or online fraud to NBI Cybercrime or PNP Anti-Cybercrime. Report misuse or exposure of personal data to the NPC. Some serious incidents may justify reporting to more than one office.

What if my credit card or e-wallet was used for the order?

Contact your bank, card issuer, or e-wallet provider immediately to block the account or card and dispute the transaction. Save the reference number. This may involve access device fraud under RA 8484, as amended by RA 11449, aside from possible cybercrime.

Can I post the rider or seller online to warn others?

Be careful. Posting personal details may expose you to defamation, privacy, or harassment issues. It is usually better to report through the platform and authorities, and to keep screenshots as evidence instead of making public accusations.

How long does this usually take to resolve?

A simple platform cancellation may be resolved within days. Repeated prank orders may take longer because platforms and couriers need to block accounts, numbers, addresses, or sellers. Formal complaints with agencies, police, or prosecutors can take weeks or months depending on evidence, workload, and whether the offender can be identified.

Key Takeaways

You are generally not liable to pay for an online shopping order you did not place or authorize.
Refuse unauthorized COD deliveries and avoid signing, paying, or accepting the parcel.
Take photos, screenshots, tracking numbers, call logs, and written complaint records.
Secure your shopping, email, banking, card, and e-wallet accounts immediately.
Use the platform’s official help center and ask for written confirmation that the order is unauthorized.
Repeated fake orders, account compromise, payment fraud, or threats should be reported to the proper authorities.
Possible Philippine legal bases include the Civil Code, RA 8792, RA 10175, RA 10173, the Revised Penal Code, and RA 8484 as amended by RA 11449.
If personal data was exposed or mishandled, the National Privacy Commission may be the proper forum.
If the issue is an online seller or platform consumer complaint, DTI may help.
The strongest protection is a clear paper trail: refusal records, screenshots, reports, and written confirmations.