What to Do If Someone Uses Your Pag-IBIG Records to Take Out a Loan

Quick answer

If a Pag-IBIG loan appears under your name but you did not apply for, authorize, or receive it, report it to Pag-IBIG Fund immediately as a suspected fraudulent loan and identity-theft incident. Dispute the loan in writing, request copies of the application and disbursement records, ask Pag-IBIG to preserve all evidence and suspend adverse collection action while the claim is investigated, and obtain a reference number or stamped receiving copy.

Also secure your Virtual Pag-IBIG account, notify your employer if payroll deductions are involved, and report the incident to the Philippine National Police or National Bureau of Investigation. If your personal data may have been improperly used or exposed, first send Pag-IBIG’s Data Protection Office a written privacy complaint; you may escalate to the National Privacy Commission when its filing requirements are met.

A loan’s appearance in Pag-IBIG’s system does not, by itself, prove that you consented to or are legally responsible for it. Liability depends on the authentic application, signatures or electronic records, identity-verification process, disbursement trail, and other evidence. Pag-IBIG—not the member—should make a documented determination after investigating the disputed transaction.

Act immediately

1. Confirm what the record actually shows

Sign in only through the official Virtual Pag-IBIG website and review your loan records. Determine, if possible:

  • The type of loan
  • Application and approval dates
  • Principal amount
  • Current balance
  • Disbursement date and method
  • Payment or payroll-deduction history
  • Any altered mobile number, email address, residential address, employer, or bank or cash-card information

Take screenshots or download available records. Keep the original electronic files; do not edit or crop away dates, URLs, reference numbers, or account details.

If you cannot access the account, do not repeatedly attempt passwords or use links sent by an unknown person. Contact Pag-IBIG through its official channels.

2. Report the loan to Pag-IBIG in writing

Call Pag-IBIG Fund at (02) 8-724-4244, email contactus@pagibigfund.gov.ph, or visit a branch listed through the official Pag-IBIG website. A phone call is useful for speed, but follow it with a written complaint so there is a record.

Your complaint should state clearly:

I dispute this loan in full. I did not apply for, authorize, sign, electronically approve, or receive the proceeds of this loan.

Include only verified facts. Identify the loan number, amount, dates, and how you discovered it. Attach copies—not your only originals—of relevant records and valid identification.

Ask Pag-IBIG to:

  • Mark the account as formally disputed or under fraud investigation;
  • Prevent further unauthorized changes or transactions;
  • Preserve the complete paper and electronic audit trail;
  • Explain any continuing deductions, interest, penalties, notices, or collection activity;
  • Provide written acknowledgment and a case or reference number;
  • Notify you of the investigating office and required supporting documents; and
  • Issue a written resolution after the investigation.

Do not send passwords, one-time PINs, card PINs, or full account credentials by email.

3. Request the underlying records

Under Section 16 of the Data Privacy Act of 2012, a data subject generally has the right to reasonable access to personal information being processed, its sources and recipients, the manner and purpose of processing, and relevant access or modification dates. The same provision permits a person to dispute inaccurate data and, upon substantial proof, seek blocking, removal, or destruction of information that is false, unlawfully obtained, or used for unauthorized purposes. Exceptions may apply, including where information is being used for an investigation.

Request copies or an opportunity to inspect the records relevant to the disputed loan, including:

  • The complete application and all attachments
  • Signatures, uploaded IDs, photographs, selfies, or biometric-verification records
  • Employer certification or approval, if any
  • Mobile numbers and email addresses used
  • Dates and methods of account creation or modification
  • Transaction logs, authentication records, and available audit trails
  • Approval and disbursement records
  • The receiving bank, e-wallet, cash card, or other destination identified in the records
  • Notices or messages sent during application and approval
  • Any authority, consent, or acknowledgment attributed to you

Some information may be redacted or temporarily withheld to protect another person’s data or an active investigation. Ask Pag-IBIG to state the legal or investigative reason for any refusal and to preserve the unredacted material.

4. Secure your accounts and identity documents

Change the password of your Virtual Pag-IBIG account and the email account connected to it. Use unique passwords and enable available security controls. Check whether the registered mobile number, email address, and other profile data have been changed.

Also consider:

  • Asking your mobile provider whether an unauthorized SIM replacement occurred;
  • Securing online banking and e-wallet accounts connected to the incident;
  • Reporting lost or stolen identification to the issuing agency;
  • Changing reused passwords on other accounts; and
  • Watching for password-reset messages, unfamiliar loan inquiries, or new financial accounts.

Do not delete suspicious texts, emails, call logs, or account notifications. They may help identify how the fraud occurred.

5. Notify your employer if deductions or employer records were used

If the loan is being deducted from your salary, promptly give payroll or human resources a copy of your written Pag-IBIG dispute. Ask for:

  • The date deductions began;
  • Payroll records and remittance references;
  • Copies of any loan notice, employer confirmation, or authority relied upon;
  • Preservation of emails, forms, portal logs, and CCTV footage, if relevant; and
  • Written confirmation of how deductions will be handled while Pag-IBIG investigates.

Do not assume the employer may automatically stop a deduction. Pag-IBIG and the employer should clarify the governing instruction and any interim arrangement in writing. Keep your payslips and compare them with Pag-IBIG’s posted payments.

6. Report suspected identity theft or fraud

When another person intentionally uses your identifying information without right through a computer system, the conduct may fall within computer-related identity theft under Section 4(b)(3) of the Cybercrime Prevention Act of 2012. Depending on the evidence, computer-related forgery, computer-related fraud, falsification, estafa, or other offenses may also be considered by investigators and prosecutors. These are fact-dependent classifications; a victim need not choose the final criminal charge before reporting what happened.

You may report the incident to:

  • The PNP Anti-Cybercrime Group or the appropriate police station; or
  • The NBI Cybercrime Division, Fraud and Financial Crimes Division, or an NBI regional office.

The NBI provides an official online complaint page and information on investigative assistance for computer-crime victims.

Bring or preserve:

  • Government-issued identification
  • Your Pag-IBIG MID number and disputed-loan details
  • Your written dispute and Pag-IBIG acknowledgment
  • Screenshots, emails, texts, and call logs
  • Payslips showing deductions
  • Proof that you did not receive the proceeds, if available
  • Bank or e-wallet statements for the relevant period
  • Specimen signatures and suspected forged documents
  • A chronological statement of events
  • Names and contact details of possible witnesses

Ask for a complaint, blotter, or reference number and submit a copy to Pag-IBIG. A police or NBI report supports the dispute but does not automatically cancel the loan; Pag-IBIG must still investigate and correct its records where warranted.

If the money was just transferred

If you learn that the proceeds recently entered or passed through a bank, e-wallet, or other financial account, immediately notify the institution through its official fraud channel. Identify the transaction as disputed, give the date, amount, recipient account, and reference number, and request urgent tracing and preservation.

The Anti-Financial Account Scamming Act authorizes covered institutions, in circumstances governed by Bangko Sentral ng Pilipinas rules, to temporarily hold funds reasonably believed to involve a prohibited act and to conduct coordinated verification. Whether a hold remains possible depends on the institution, transaction, available evidence, and whether the funds are still traceable. Do not delay while trying to investigate the recipient yourself.

Never confront a suspected offender in a way that risks your safety or alerts the person to destroy evidence.

Make a separate data-privacy request

Write to Pag-IBIG Fund’s Data Protection Office at dpo@pagibigfund.gov.ph. Pag-IBIG’s official privacy policy identifies that office and its contact details.

Ask it to determine:

  • What personal data was used;
  • Where the data came from;
  • Whether your profile or contact details were altered;
  • Who accessed or received the data;
  • Whether unauthorized processing or a personal-data breach occurred;
  • What containment and corrective measures were taken; and
  • Whether inaccurate data and recipients of that data will be corrected or notified.

The Data Privacy Act requires personal-information controllers to use reasonable organizational, physical, and technical safeguards against unlawful access, fraudulent misuse, alteration, disclosure, and other unauthorized processing. A fraudulent loan does not automatically prove that Pag-IBIG itself violated the Act; the source of the data and the adequacy of the relevant safeguards must be investigated.

When to complain to the National Privacy Commission

You may file an NPC complaint if your personal information was misused or your data-subject rights were violated. Ordinarily, you must first notify the respondent in writing and give it an opportunity to act. Under the NPC’s current procedure, the exhaustion requirement is generally satisfied when the respondent fails to take timely or appropriate action, or gives no response within 15 calendar days after receiving the written notice. Proof of that prior notice must accompany the complaint.

Use the NPC’s current complaint-affidavit form and follow its notarization, verification, evidence, and filing requirements. The NPC began using a new form on July 1, 2025, so do not rely on an older downloaded copy. See the official NPC complaint instructions and complaint page.

The NPC may waive ordinary preliminary requirements in qualifying serious or urgent cases, but do not assume a waiver will be granted. An NPC case concerns privacy-law compliance; it is not a substitute for Pag-IBIG’s loan dispute process or a criminal complaint.

What your written dispute should contain

A useful dispute letter should include:

  • Your full name, MID number, and safe contact details
  • The disputed loan’s number, type, amount, and dates
  • The date and manner of discovery
  • A direct denial of applying, consenting, signing, authenticating, or receiving proceeds
  • Any incorrect profile or employer information
  • A list of attached evidence
  • Specific requests for investigation, record preservation, access, correction, and written resolution
  • A request that the dispute be noted in all relevant records
  • Your signature and date

If a signature or electronic approval is attributed to you, do not casually speculate about who produced it. State why it is not yours and identify objective differences or circumstances. Investigators or document examiners should determine authenticity.

Evidence to preserve

Keep a single chronological file containing:

  • Original screenshots and downloaded records
  • Complete email files, not only printed copies
  • Text messages and call logs showing numbers, dates, and times
  • Pag-IBIG reference numbers and names of personnel spoken to
  • Stamped receiving copies, courier receipts, and email-delivery records
  • Payslips and employer correspondence
  • Bank and e-wallet statements
  • Copies of IDs believed to have been misused
  • Account-change and password-reset alerts
  • Police, NBI, and NPC filings
  • Notes made immediately after each conversation

Back up the evidence securely. Share it only with the agencies, institutions, counsel, or investigators who need it. Publicly posting the alleged offender’s identity, documents, or account details can expose personal data, compromise the investigation, or create other legal problems.

Do not accidentally adopt the disputed debt

Until you receive case-specific advice, avoid signing a restructuring agreement, compromise, acknowledgment of debt, promissory note, or similar document that treats the fraudulent loan as yours. Do not describe a payment as an admission that you borrowed the money.

At the same time, do not ignore notices, deadlines, salary deductions, or demands. Reply in writing that the account is disputed and attach the earlier case reference. Ask how your account and deductions will be treated during the investigation. If making any interim payment appears necessary to prevent immediate harm, consult a lawyer first about reserving your rights in writing.

Common mistakes

  • Reporting only by phone and keeping no proof
  • Waiting for another deduction or collection notice before acting
  • Using unofficial social-media accounts or links
  • Giving an OTP or password to someone claiming to “reverse” the loan
  • Sending original IDs or evidence without retaining copies
  • Asking Pag-IBIG only to cancel the balance, without requesting the application and disbursement trail
  • Failing to notify payroll when employer records or deductions are involved
  • Filing an NPC complaint without first satisfying or addressing its exhaustion requirement
  • Naming a suspected offender publicly before the evidence is verified
  • Paying a supposed fixer who promises immediate deletion of the loan

When legal help is urgent

Consult a Philippine lawyer promptly if:

  • Pag-IBIG rejects the dispute despite apparent forgery or unauthorized access;
  • Collection, offset, foreclosure, litigation, or adverse employment action is threatened;
  • A housing loan, mortgage, title, or real property is involved;
  • You are asked to sign an acknowledgment, settlement, or restructuring document;
  • Investigators identify you as a suspect rather than a victim;
  • The fraud involves an employee, relative, employer, agent, or insider with access to your records;
  • Significant deductions have already been made;
  • Several institutions or accounts are affected; or
  • You need court relief, recovery of money, or protection against continuing harm.

If you cannot afford private counsel, inquire with the Public Attorney’s Office about eligibility and available assistance. For workplace deduction issues, you may also seek guidance from the appropriate labor office, while recognizing that the validity and correction of the Pag-IBIG loan record remain separate issues.

Frequently asked questions

Am I required to pay a loan I never applied for?

Not merely because it appears under your name. Pag-IBIG must examine whether a valid application and authorization existed and where the proceeds went. Do not ignore the account, however: dispute it promptly and obtain a written determination.

Should I stop salary deductions myself?

Notify Pag-IBIG and payroll immediately and request written instructions. The proper interim treatment depends on the applicable deduction authority and Pag-IBIG’s investigation. Preserve every payslip and remittance record.

Is an affidavit of denial enough?

It is useful but may not be conclusive. The application, signatures, authentication records, account changes, employer records, device or system logs, and disbursement trail may be equally important. Follow Pag-IBIG’s documentary requirements and keep proof of everything submitted.

Can Pag-IBIG refuse to give me records?

The Data Privacy Act generally gives you access to your processed personal information, but lawful restrictions may apply—for example, to protect another person’s data or an investigation. Ask for the precise basis of any refusal and request that all records be preserved.

Should I file with the police, NBI, or NPC first?

Report the disputed loan to Pag-IBIG immediately. A police or NBI complaint addresses suspected crime. An NPC complaint addresses possible misuse or mishandling of personal data and ordinarily requires prior written notice to the respondent. These remedies may proceed separately.

What if the offender is a relative or co-worker?

The relationship does not create consent. Report only facts you can support, preserve communications and access records, and avoid confrontation or public accusations. Seek legal advice if the person had legitimate access to some of your documents but used them beyond the authority you gave.

Will a police report automatically erase the loan?

No. It is evidence of a reported incident, not a final finding that cancels the account. Pag-IBIG must investigate its records, and criminal or regulatory authorities have their own procedures.

How long do I have to report it?

Do not wait. There is no single deadline that safely governs every possible Pag-IBIG, civil, criminal, privacy, payroll, or financial-account remedy. Delay can allow funds to disappear, records to be overwritten, or deductions and collection activity to continue.

This article provides general legal information, not legal advice or a prediction of any case’s outcome. Procedures and conclusions can depend on the loan type, application documents, disbursement method, and investigation findings. Official sources and procedures were checked as of September 3, 2026.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.