Discovering a Pag-IBIG loan that you never applied for can be frightening, especially if deductions have started or collection notices are being sent in your name. Treat the situation as possible identity theft and loan fraud. Your priorities are to document the unauthorized loan, secure your accounts, file a formal written dispute with Pag-IBIG Fund, preserve evidence, and report the incident to the appropriate authorities. Acting quickly matters because transaction logs, CCTV footage, electronic authentication records, and disbursement information may become harder to retrieve over time.

What It Means When Someone Uses Your Pag-IBIG Records for a Loan

An unauthorized Pag-IBIG loan may involve the misuse of your:

Pag-IBIG Membership Identification Number or MID
Member’s Data Form information
Name, birth date, address, employer, and contact details
Government-issued identification cards
Photograph or signature
Virtual Pag-IBIG account
Email address, mobile number, password, or one-time password
Employer certification or payroll records
Loyalty Card Plus, bank account, or cash card details

The fraudulent transaction may involve a Multi-Purpose Loan, calamity loan, housing loan, or another Pag-IBIG credit facility. In some cases, the offender is a stranger who obtained leaked personal information. In others, the person may be a relative, co-worker, employer representative, agent, developer, or someone who previously had legitimate access to the member’s documents.

A loan appearing under your Pag-IBIG account does not automatically prove that you knowingly applied for it. Pag-IBIG must examine how the application was submitted, authenticated, approved, and released.

What to Do Immediately

1. Confirm the loan and record every available detail

Check your account through the official Virtual Pag-IBIG portal or visit a Pag-IBIG branch. Virtual Pag-IBIG allows members to monitor Pag-IBIG records and loan payments, including Multi-Purpose Loan and housing loan transactions. (Google Play)

Record or request the following:

Loan type
Loan application or account number
Amount approved and amount released
Application date
Approval and release dates
Outstanding balance
Payment or deduction history
Mode of application
Branch, online portal, employer, developer, or service desk involved
Account, card, or payment channel where the proceeds were released
Mobile number and email address used for verification
Property details, if it is a housing loan

Take screenshots showing the date and time. Download statements where possible. Do not alter or crop the original files; create separate copies for highlighting or annotation.

2. Secure your email, mobile number, and online accounts

Change the passwords for your:

Virtual Pag-IBIG account
Primary email account
Online banking and e-wallet accounts
Mobile network account, if it has an online portal
Cloud storage containing IDs or employment documents

Use different, strong passwords and enable multi-factor authentication. Check whether your email recovery address, mobile number, or account profile was changed.

Contact your telecommunications provider if you experienced unexplained loss of signal, a replacement SIM request, or messages suggesting that someone attempted to transfer your number. A SIM-swap attack can allow an offender to receive verification codes intended for you.

3. Notify Pag-IBIG immediately, then follow up in writing

You may first call or visit a branch to stop further processing, but a telephone conversation alone is not enough. Send a dated written dispute and obtain proof that Pag-IBIG received it.

The official Pag-IBIG online services page lists contactus@pagibigfund.gov.ph and provides an official branch locator. (Pag-IBIG Fund Services)

Your written complaint should clearly state:

I deny applying for, authorizing, receiving, or benefiting from this loan. I dispute the loan and all related deductions, charges, and collection activity.

Ask Pag-IBIG to:

Mark the loan as formally disputed.
Prevent additional releases or transactions while the complaint is being investigated.
Preserve all physical and electronic records.
Investigate the application, authentication, approval, and disbursement.
Provide copies of the documents and personal data used in the transaction, subject to lawful redactions.
Identify the account or payment channel that received the proceeds.
Correct your membership and loan records if fraud is established.
Suspend adverse collection action and payroll deductions while responsibility is unresolved, when administratively permissible.
Give you a complaint reference number and the name or unit handling the case.
Send the investigation result in writing.

Bring at least two copies of your letter. Ask Pag-IBIG to stamp one copy “received,” with the date, branch, and receiving employee’s name. For email submissions, retain the sent message, delivery confirmation, attachments, and any automated reference number.

4. Notify your employer if payroll deductions are involved

If the loan is being deducted from your salary, send a written notice to payroll or human resources stating that the loan is disputed and that you did not authorize it.

Ask for copies of:

Any employer certification submitted with the application
Payroll deduction authority
Notice or instruction received from Pag-IBIG
Internal email or record showing who processed the transaction
Dates and amounts of deductions already remitted

Your employer may be unable to stop deductions without instruction from Pag-IBIG, depending on the loan arrangement. Even so, your written objection creates an important record that you did not accept the debt.

If deductions continue while the matter is under investigation, state in writing that any deducted amount is being collected under protest and must not be treated as an admission that the loan is yours.

5. Contact the bank, cash card issuer, or e-wallet that received the proceeds

If the proceeds were sent to a Loyalty Card Plus account, bank account, cash card, or e-wallet, immediately notify the relevant institution’s fraud department.

Provide the loan or transaction reference and request that it:

Preserve account-opening and transaction records
Flag the receiving account for investigation
Preserve CCTV, device, IP address, and withdrawal information
Trace transfers to other accounts
Coordinate with Pag-IBIG and law enforcement upon lawful request

A bank or wallet provider will not normally disclose another account holder’s protected information directly to you. Investigators, prosecutors, courts, or authorized government agencies can formally request it.

6. Preserve evidence before confronting the suspected offender

Save:

Text messages, emails, and chat conversations
Notifications concerning the application or release
Screenshots of your account
Call logs and voicemail
Copies of IDs that may have been compromised
Loan statements and payroll slips
SIM replacement or account-reset notices
Names of witnesses
CCTV locations and approximate times
Proof that you were elsewhere when an in-person application was allegedly made
Passport travel stamps, attendance records, or overseas employment records

Export chats instead of relying only on screenshots. Preserve the original phone and files. Philippine rules recognize electronic documents as evidence, but the person presenting them must still establish authenticity. The Rules on Electronic Evidence place responsibility on the party offering an electronic document to prove that it is authentic. (Lawphil)

Do not delete suspicious messages, even when they contain upsetting statements. Do not publicly post the suspected offender’s name or personal information while the facts remain under investigation.

Documents to Request From Pag-IBIG

Request the fullest set of records that Pag-IBIG can lawfully provide. Some information may be redacted to protect third parties or an ongoing investigation.

Record	Why it matters
Loan application and attachments	Shows the information, signature, IDs, and declarations used
Promissory note or loan agreement	Shows the supposed consent and obligations attributed to you
Employer certification	Identifies whether employment or payroll information was used
Identity-verification records	May show photographs, biometrics, ID checks, or verification questions
Electronic application logs	May identify the date, time, device, IP address, and account used
OTP or verification history	Shows where authentication messages were sent
Disbursement record	Identifies the account, card, check, or channel that received the money
Approval and processing trail	Identifies the branch or personnel who handled the application
Payment and deduction history	Establishes financial loss and continuing collection
CCTV preservation information	May help identify an in-person applicant
Internal investigation result	Supports correction, criminal complaints, and privacy proceedings

Ask Pag-IBIG to preserve these records immediately. Do not assume that every type of technical data is retained indefinitely.

Your Rights Under Philippine Law

A valid loan requires your consent

Under Article 1159 of the Civil Code, contractual obligations have the force of law only when the contract was validly entered into. Article 1318 requires consent, a definite object, and a lawful cause for a valid contract.

If another person impersonated you, forged your signature, or used your account without authority, you may dispute whether any valid consent came from you. The mere presence of your name, MID number, or personal information on an application does not conclusively establish that you agreed to borrow the money.

Electronic applications are not automatically unquestionable. Republic Act No. 8792, or the Electronic Commerce Act of 2000, recognizes electronic documents and electronic signatures, but attribution and authenticity must still be established. An electronic signature is legally equivalent to a handwritten signature only when the applicable requirements are proven. (Lawphil)

You have data privacy rights

Republic Act No. 10173, or the Data Privacy Act of 2012, applies to the collection, use, storage, disclosure, and security of personal data by government and private entities.

As the data subject—the person to whom the information relates—you may exercise rights that include:

Being informed about how your data was processed
Accessing personal data concerning you
Disputing inaccurate or unlawfully processed data
Requesting correction
Objecting to certain processing
Seeking blocking or removal when legally justified
Filing a complaint with the National Privacy Commission
Claiming damages when legally supported

The National Privacy Commission explains these protections through its official Data Subject Rights guide and the official text of the Data Privacy Act. (National Privacy Commission)

A fraudulent loan does not necessarily prove that Pag-IBIG itself violated the Data Privacy Act. The investigation must determine whether the fraud resulted from an external theft, an insider’s unauthorized act, inadequate identity verification, improper disclosure, a security incident, or another cause.

Possible criminal offenses

Depending on the evidence, the acts may constitute one or more offenses.

Estafa

Article 315 of the Revised Penal Code punishes forms of fraud in which false pretenses, fraudulent representations, or abuse of confidence cause another person to part with money or property.

Falsification and use of falsified documents

Articles 171 and 172 may apply when a person falsifies a public, official, commercial, or private document, or knowingly uses a falsified document. Forged loan forms, employer certifications, identification records, signatures, or notarized instruments may fall within these provisions, depending on their nature and use. The Supreme Court has recognized prosecutions involving estafa through falsification of commercial documents. (Lawphil)

Computer-related identity theft

Section 4(b)(3) of Republic Act No. 10175, the Cybercrime Prevention Act of 2012, penalizes the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another person without right.

This may apply when someone uses stolen personal information, login credentials, digital images, or electronic records to submit an online loan application. The law created specialized cybercrime units in the NBI and PNP to investigate cybercrime offenses. (Cybercrime Division)

Access device fraud

Republic Act No. 8484, the Access Devices Regulation Act of 1998, may apply if the offender used another person’s card, account number, PIN, code, or similar access device to obtain money or value. Its application depends on the specific account or payment method used. (Lawphil)

How to File a Criminal Complaint

A police blotter records that an incident was reported, but it does not by itself begin a full prosecution. For an actual investigation, file a sworn complaint with the NBI, PNP, or the proper prosecutor’s office.

1. Prepare a complaint-affidavit

Your affidavit should state, in chronological order:

Your identity and Pag-IBIG membership details.
When and how you discovered the loan.
Why you could not have applied for or received it.
Whether your IDs, phone, email, or records were previously lost or compromised.
The steps you took to contact Pag-IBIG, your employer, and the receiving financial institution.
The financial and personal harm caused.
The identity of any suspected person, if known.
The evidence supporting your statements.

Do not guess facts. Clearly separate what you personally know from what another person told you.

2. Attach supporting documents

Include organized and numbered copies of:

Government-issued IDs
Pag-IBIG complaint and receiving copy
Loan statements
Screenshots
Payroll slips
Employer correspondence
Bank or wallet fraud reports
Affidavit of loss, if an ID or device was lost
Travel or attendance records
Witness affidavits
Relevant messages and electronic records

3. File with the appropriate investigative office

You may approach:

The NBI Cybercrime Division or regional cybercrime office
The NBI Fraud and Financial Crimes Division
The PNP Anti-Cybercrime Group or a local police cybercrime desk
The Office of the City or Provincial Prosecutor

The NBI’s published procedure for computer-crime victims involves completing a complaint form and presenting relevant documents and evidence to an investigator. (National Bureau of Investigation)

You may file even if you do not yet know the offender’s name. Identify the respondent as unknown and provide all available account, phone, email, branch, device, and disbursement information that could help trace the person.

Always obtain a receiving copy, docket number, or investigation reference.

Filing a Complaint With the National Privacy Commission

A National Privacy Commission complaint is separate from a criminal complaint. It focuses on unlawful personal-data processing, failure to respect data-subject rights, or inadequate handling of a privacy violation or data breach.

Before filing, you generally must first inform the responsible entity in writing and give it an opportunity to address the issue. Under the NPC’s current rules, the complaint may proceed when the entity fails to take timely or appropriate action or gives no response within 15 calendar days after receiving your written notice. Proof of prior notice must be attached. (National Privacy Commission)

The NPC requires a notarized complaint-assisted form or verified complaint, supporting evidence, and witness affidavits where applicable. It may be submitted personally, by registered mail, courier, or an electronic method authorized by the Commission. Review the official NPC complaint-filing instructions before submission. (National Privacy Commission)

Your NPC complaint should identify:

The personal information involved
How it was allegedly misused
The entity or persons responsible, if known
The harm caused
Your written request for access, investigation, correction, or other action
The response received, or proof that 15 calendar days passed without an adequate response

An NPC case can address privacy violations and data-processing failures. It does not replace the Pag-IBIG loan dispute or the criminal investigation.

Documents You Will Commonly Need

Document	Where to obtain it
Valid government-issued IDs	Issuing government agency
Pag-IBIG MID and account information	Virtual Pag-IBIG or Pag-IBIG branch
Statement of account or loan record	Pag-IBIG
Formal dispute letter	Prepared and signed by the member
Affidavit of denial or complaint-affidavit	Notary public, prosecutor, NBI, or authorized officer
Proof of payroll deductions	Employer or payroll department
Bank or wallet transaction report	Financial institution
Proof of compromised phone or SIM	Telecommunications provider
Screenshots and message exports	Member’s devices and accounts
Proof of travel or physical location	Passport, employer, airline, school, or attendance system
Special Power of Attorney	Notary or Philippine consular officer, when representation is necessary

Notarization charges, copying expenses, courier fees, and overseas authentication costs vary. Pay only through authorized channels and request official receipts where applicable.

If You Are Outside the Philippines

An OFW or Filipino living abroad does not necessarily need to return immediately just to begin reporting the incident. You can:

Secure your online accounts
Email Pag-IBIG and request an investigation
Contact the Pag-IBIG office serving overseas members
Send scanned evidence
Appoint a trusted representative through a Special Power of Attorney if original documents or personal follow-up are required

An affidavit or Special Power of Attorney may be signed before a Philippine Embassy or Consulate. A document notarized locally in an Apostille Convention country may generally be apostilled by the competent authority for use in the Philippines. Requirements vary by country and by the receiving office, so confirm the exact form with Pag-IBIG and the relevant Philippine post. DFA guidance recognizes both consular notarization and apostilled documents in appropriate cases. (Philippine Embassy in New Delhi)

A foreign national who is a Pag-IBIG member may use the same complaint and data-privacy procedures. Identification, notarization, translation, and apostille requirements may differ when documents were issued abroad.

Common Scenarios and Practical Problems

The offender is a relative or co-worker

Do not treat the matter as merely a private family or workplace disagreement. If your identity was used to obtain money, immediately preserve evidence and report the loan.

Avoid signing a document stating that you “allowed” the transaction unless that is completely true. A supposed settlement may later be presented as proof that you accepted or benefited from the loan.

Your phone received an OTP, but you did not apply

An OTP sent to your phone does not by itself prove that you entered it or authorized the transaction. Ask for the time it was generated, the number to which it was sent, the device and session involved, and any record showing how it was submitted.

Check whether another person had physical access to your phone, whether notifications were visible on the lock screen, or whether your SIM or email account was compromised.

The loan proceeds went to an account in your name

This can occur when an offender also opened or controlled a bank, cash-card, or e-wallet account using your identity. Do not assume this makes you responsible.

Request the receiving institution to preserve:

Account-opening documents
Identity-verification records
Device and access logs
Withdrawal or transfer details
ATM or branch CCTV
Recipient accounts

A housing loan was opened using your records

A fraudulent housing loan requires urgent investigation because it may involve a property, developer, seller, appraisal, title documents, mortgage documents, and substantial funds.

Request the property address, title number, seller or developer, loan takeout date, mortgage instruments, appraisal records, and disbursement recipients. Check the title through the Registry of Deeds if your name appears as buyer, borrower, or mortgagor.

Pag-IBIG says the application passed verification

Passing an internal verification process does not end the issue. Ask what verification was performed and what evidence connects you personally to the application.

Verification may show that someone possessed your information; it does not necessarily prove that the person was you.

Mistakes That Can Weaken Your Case

Reporting only by phone and keeping no written record
Waiting until deductions or penalties have accumulated
Signing an acknowledgment of debt to “fix” the account quickly
Paying voluntarily without stating that the payment is disputed
Deleting suspicious messages or resetting a device before preserving evidence
Posting accusations publicly instead of filing documented complaints
Sending unredacted IDs and your complete MID number through unofficial social-media accounts
Giving original evidence to an investigator without retaining copies
Using a fixer who promises to erase the loan record
Assuming a police blotter is already a criminal complaint
Filing an NPC complaint without first giving Pag-IBIG written notice and an opportunity to respond

Frequently Asked Questions

Am I automatically responsible because the loan appears in my Pag-IBIG account?

No. The account entry is evidence that a transaction was processed, but it does not conclusively prove that you applied, consented, or received the proceeds. Your responsibility should be determined after reviewing the application, authentication, and disbursement evidence.

Can Pag-IBIG continue collecting while the loan is disputed?

Collection may continue unless Pag-IBIG administratively suspends it or issues instructions to the employer. Request suspension in writing. If deductions continue, maintain your written objection and state that the deductions are under protest.

Should I pay the loan to stop penalties?

Paying may reduce immediate arrears, but an unexplained voluntary payment could later be argued as recognition of the debt. Before making a payment, formally dispute the loan and document that any amount collected is under protest and without admission of liability.

Can I demand a copy of the loan application?

You may request access to personal data and documents concerning you. Pag-IBIG may redact information protected by law or temporarily restrict disclosure that could compromise an investigation, but it should address your access request and explain any lawful limitation.

What if the suspected offender is a family member?

Family relationship does not make the unauthorized use lawful. Preserve the evidence and follow the same Pag-IBIG, law-enforcement, and privacy procedures. Do not sign an affidavit clearing the person unless the statement is truthful and voluntary.

Do I need a lawyer to file the initial complaints?

You can file an internal Pag-IBIG dispute, police or NBI complaint, and NPC complaint personally. Legal assistance becomes especially useful when the amount is substantial, a housing property is involved, the account is already in default, documents appear notarized, or Pag-IBIG refuses to correct the record despite strong evidence.

Can I file a case if I do not know who used my identity?

Yes. Investigators can begin with the disbursement account, phone number, email, device information, branch records, CCTV, employer certification, and electronic logs. State that the offender is presently unknown.

Can I claim damages?

Civil Code Articles 19, 20, and 21 may support a claim when a person willfully or negligently causes damage contrary to law, morals, good customs, or public policy. Article 33 also permits an independent civil action in cases involving fraud. A damages claim still requires proof of the wrongful act, injury, causation, and the amount or nature of the loss.

How long does an unauthorized Pag-IBIG loan investigation take?

There is no single timeline for every case. Initial filing can be completed in one branch visit, but document retrieval, account tracing, signature examination, technical-log review, and coordination with banks or law enforcement may take weeks or months. Housing-loan cases and cases involving several institutions usually take longer.

What should I do after Pag-IBIG removes or corrects the loan?

Request written confirmation showing that:

The loan was found unauthorized or was removed from your account
Your outstanding balance was corrected
Deductions and collection activity were stopped
Amounts wrongfully deducted will be refunded or credited
Your membership record has no adverse notation caused by the fraudulent loan

Keep the confirmation permanently with your complaint records.

Key Takeaways

Treat an unfamiliar Pag-IBIG loan as possible identity theft and fraud.
Verify the loan through official Pag-IBIG channels and preserve screenshots, statements, and transaction details.
File a written dispute; do not rely only on telephone calls or verbal assurances.
Ask Pag-IBIG to preserve the application, authentication records, disbursement information, electronic logs, and CCTV.
Notify your employer and the bank, card issuer, or e-wallet involved.
Secure your email, mobile number, Virtual Pag-IBIG account, and financial accounts.
File a sworn complaint with the NBI, PNP, or prosecutor when criminal activity is suspected.
Give Pag-IBIG written notice before filing a National Privacy Commission complaint, subject to the NPC’s procedural exceptions.
Do not sign an acknowledgment, settlement, or repayment document that inaccurately suggests you authorized the loan.
Obtain written confirmation when the loan, deductions, and membership records have been corrected.