A loan approval message for a loan you never applied for should be treated as a possible scam, identity-theft warning, or unauthorized loan application until you verify otherwise. Do not click the link, do not pay any “processing,” “release,” or “cancellation” fee, and do not give your OTP, selfie, ID photo, bank details, e-wallet PIN, or address. In the Philippines, the most important question is not simply “Is this message real?” but “Has someone used my identity or phone number to create an actual loan record?” This guide explains how to check, what laws protect you, which agencies may be involved, and how to document and report the incident properly.

What a Fake or Unexpected Loan Approval Message Usually Means

An unsolicited “loan approved” message can fall into several categories:

Situation	What it may mean	What you should do first
Message has a suspicious link	Phishing attempt to steal personal data, OTPs, or app credentials	Do not click. Screenshot and report the number/link.
Message says you must pay a release fee	Advance-fee scam	Do not pay. Report as cyber fraud.
Message names a real lending app or bank	Could be spam, wrong number, or unauthorized application	Verify only through official channels, not the message link.
You receive calls demanding payment	Possible fraudulent loan, mistaken identity, or abusive collection	Demand proof of debt in writing. Do not admit liability.
A loan appears in your credit report	Possible identity theft or erroneous credit reporting	Dispute with the lender and the Credit Information Corporation.
Money was actually disbursed to an account	Possible account takeover, money mule scheme, or identity misuse	Report immediately to the financial institution, BSP/SEC as applicable, and cybercrime authorities.

In Philippine law, a valid loan is still a contract. Under Article 1318 of the Civil Code, there is no contract unless there is consent, a certain object, and a cause or consideration. The Supreme Court has repeatedly described a contract as a “meeting of minds,” with consent shown by offer and acceptance. If you never applied, never accepted, and never authorized anyone to borrow in your name, that is a serious factual issue against any claim that you owe the loan. (Lawphil)

Immediate Steps: What to Do in the First 24 Hours

1. Do not click the link or reply with personal information

Scammers often use loan approval messages to create urgency:

“Your ₱50,000 loan is approved. Claim now.”
“Pay ₱1,500 release fee.”
“Cancel within 24 hours or you will be charged.”
“Verify your identity by uploading your ID.”
“Send OTP to confirm cancellation.”

Do not interact through the message. A legitimate lender should not require your password, OTP, e-wallet PIN, full card number, or remote access to your device.

2. Preserve the evidence before blocking

Take screenshots showing:

Sender number or sender ID
Full message
Date and time received
Link or app name mentioned
Any follow-up messages or calls
Call logs, voicemail, Viber/WhatsApp/Telegram messages
Payment instructions, QR codes, bank account names, or e-wallet numbers

If harassment begins, save every call log and message. Do not delete the thread. Evidence is often more useful when it shows the sequence of events.

3. Check whether the lender is real

Do not use the link in the message. Search independently.

For a lending company or online lending platform, check whether it is connected with a company regulated by the Securities and Exchange Commission (SEC). Lending companies are regulated under Republic Act No. 9474, the Lending Company Regulation Act of 2007, which defines a lending company as a corporation engaged in granting loans from its own capital funds or limited funding sources. (Supreme Court E-Library) Financing companies are separately regulated under Republic Act No. 8556, the Financing Company Act of 1998, and the SEC has enforcement authority over them, except where BSP supervision applies because of quasi-banking functions. (Lawphil)

For a bank, e-wallet, credit card issuer, pawnshop, money service business, non-bank electronic money issuer, or other BSP-supervised financial institution, use the institution’s official website, app, hotline, or branch—not the message link.

4. Contact the supposed lender through official channels

Send a short written inquiry using the lender’s official email, in-app support, or customer service channel:

I received a loan approval message for a loan I did not apply for. Please confirm whether there is any account, application, loan, or credit record under my name, mobile number, email address, government ID, or other personal information. I do not acknowledge any debt. Please preserve all records relating to any application allegedly made under my identity, including application date, IP address, device ID, uploaded documents, selfie verification, bank/e-wallet disbursement details, and consent logs.

Ask for a written reply. Do not settle the issue through phone calls only.

5. Secure your accounts and IDs

Change passwords for:

Email used for banking or loan apps
Mobile banking apps
E-wallets
Shopping apps with saved payment methods
Cloud storage containing ID photos
Social media accounts used for login

Also enable two-factor authentication. If your SIM may have been compromised, contact your telco immediately.

Your Key Legal Rights Under Philippine Law

No Consent, No Valid Loan Contract

A loan cannot simply be imposed on a person because a stranger used their name or phone number. The lender must be able to prove the borrower’s consent, identity verification, and acceptance of the loan terms.

Under the Civil Code, consent is essential. If a person’s identity was used without authority, the issue may involve:

Lack of consent
Fraud
Falsification of documents
Identity theft
Unauthorized processing of personal data
Erroneous or misleading credit reporting

Be careful with your wording. When dealing with the supposed lender or collector, say:

“I did not apply for this loan.”
“I do not acknowledge this debt.”
“Please send proof of the alleged application and disbursement.”
“Please stop processing or reporting inaccurate data about me.”
“Please preserve your records for investigation.”

Avoid saying:

“I will pay later.”
“Maybe I forgot.”
“Can I settle for a discount?”
“I borrowed but did not receive the money.”

Those statements may later be used to suggest acknowledgment.

Financial Consumer Protection Rights

Republic Act No. 11765, the Financial Products and Services Consumer Protection Act, covers financial products and services, including credit and digital financial products. It identifies financial regulators such as the BSP, SEC, Insurance Commission, and Cooperative Development Authority, and gives them powers over market conduct, consumer complaints, enforcement, and penalties. (Supreme Court E-Library)

This matters because an unauthorized loan approval message may involve more than one regulator:

Provider involved	Likely regulator or office
Bank, e-wallet, credit card, money service business, BSP-supervised lender	Bangko Sentral ng Pilipinas
Lending company, financing company, online lending platform	Securities and Exchange Commission
Cooperative lending entity	Cooperative Development Authority
Misuse of personal data, unauthorized contact harvesting, data leak	National Privacy Commission
Credit report error	Credit Information Corporation and the submitting lender
Scam link, phishing, identity theft, cyber fraud	CICC, PNP Anti-Cybercrime Group, NBI Cybercrime Division, DOJ cybercrime channels
Scam SMS or threatening text	NTC and CICC/eGov reporting channels

Data Privacy Rights

Republic Act No. 10173, the Data Privacy Act of 2012, protects personal information and sensitive personal information. Government-issued identifiers, financial account details, and ID documents can qualify as sensitive or high-risk data depending on context. The law gives data subjects the right to access, dispute inaccuracies, seek correction, request blocking or removal in proper cases, and be indemnified for damages caused by inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal information. (National Privacy Commission)

The National Privacy Commission also lists core data subject rights, including the rights to be informed, access, file a complaint, object, rectify, erasure or blocking, data portability, and damages. (National Privacy Commission)

This is important if:

A lending app used your contacts without proper authority
Your ID photo was uploaded without permission
Your number was used for a loan application
Collectors contacted your employer, relatives, or social media friends
Your personal data was disclosed in collection messages
A lender refuses to correct false data about you

Criminal Law Issues: Identity Theft, Estafa, Falsification, and Scamming

If someone used your name, ID, selfie, SIM, bank account, or e-wallet to apply for a loan, the matter may become criminal.

Possible legal bases include:

Cybercrime Prevention Act of 2012, Republic Act No. 10175 — includes computer-related identity theft, involving the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information belonging to another without right. (Lawphil)
Revised Penal Code, Article 315 on estafa — may apply where deceit or fraudulent means caused damage.
Revised Penal Code, Article 172 on falsification by private individuals — may apply if signatures, IDs, application forms, or documents were falsified. (Lawphil)
Republic Act No. 12010, Anti-Financial Account Scamming Act — penalizes financial account scamming and recognizes risks from digital financial services, including schemes involving financial accounts, e-wallets, electronic communications, sensitive identifying information, and the use of another person’s identity or identification documents in financial account misuse. (Supreme Court E-Library)
Republic Act No. 11934, SIM Registration Act — requires SIM registration and defines spoofing as transmitting misleading or inaccurate source information in a call or text message with intent to defraud, cause harm, or wrongfully obtain anything of value. (Lawphil)

Step-by-Step Guide to Handling the Situation

Step 1: Classify the Message

Ask yourself:

Does the message contain a link?
Does it ask for a fee before loan release?
Does it mention a lender you have used before?
Does it contain your real name?
Does it mention a loan amount, application number, or due date?
Did money enter any account under your control?
Did collectors start calling you or your contacts?
Did the alleged loan appear in a credit report?

The more personal and specific the message is, the more seriously you should treat the possibility of identity misuse.

Step 2: Verify Without Using the Suspicious Link

Use only official channels:

Official website or verified app
Customer service hotline from the provider’s official website
Branch visit
SEC iMessage for SEC-related complaints
BSP Online Buddy for BSP-supervised institutions
NPC complaint channel for privacy violations

The SEC’s iMessage platform is the SEC’s web-based channel for inquiries, complaints, incidents, and requests, and it provides ticket creation and status checking. (iMessage) For BSP-supervised financial institutions, BSP instructs consumers to first raise the concern with the institution, and if unresolved, escalate through the BSP Online Buddy or other BSP consumer assistance channels. (Bureau of Soils and Water Management)

Step 3: Send a Formal Denial and Request for Records

Your message should be firm and factual:

I received a loan approval/demand message regarding an alleged loan I did not apply for. I deny applying for, accepting, receiving, or authorizing this loan. Please provide copies of all documents, digital consent records, verification records, uploaded IDs, selfie verification, disbursement details, IP/device logs, and communications allegedly connected with this application. Please immediately tag the account as disputed and refrain from reporting or continuing to report inaccurate information to any credit registry while the dispute is pending.

Keep proof that you sent it: email sent folder, ticket number, courier receipt, or screenshot.

Step 4: Ask for Proof Before Discussing Payment

A legitimate lender should be able to show:

Loan application date and time
Name, mobile number, email, and ID used
Copy of signed or electronically accepted loan agreement
Disclosure statement showing interest, fees, charges, and net proceeds
Disbursement account or e-wallet
Verification method used
Consent logs
Collection notices
Data privacy notice and consent basis

Republic Act No. 3765, the Truth in Lending Act, requires creditors to provide a clear written statement before consummation of the transaction, including the amount financed and finance charge. (Lawphil) If a supposed lender cannot even show a basic loan agreement, disclosure statement, and disbursement trail, that is a major red flag.

Step 5: File the Right Complaint

Use this table as a practical guide:

Problem	Where to complain	Key documents
Scam SMS with link	NTC text scam report, eGov eReport, CICC Hotline 1326	Screenshot, sender number, link, date/time
Bank/e-wallet/credit card issue	Provider first, then BSP if unresolved	Complaint to provider, reply, screenshots, account details
Lending or financing company issue	SEC iMessage	Loan message, company/app name, screenshots, demand letters
Privacy violation or contact harassment	National Privacy Commission	Notarized complaint, screenshots, contact logs, proof of disclosure
Credit report shows false loan	CIC Online Dispute Resolution System	Credit report, disputed contract info, proof of denial
Identity theft or cyber fraud	CICC, PNP ACG, NBI Cybercrime Division	Screenshots, IDs misused, call logs, affidavits, account records

The NTC has stated that text scam reports may be filed through its text spam/scam report channel, with a valid ID and an image of the text spam or scam showing the cellphone number. It may endorse matters for blocking or appropriate action. (www.foi.gov.ph) The CICC has also encouraged reporting SMS scams through the eGov app’s eReport feature or Hotline 1326. (Philippine News Agency)

Step 6: File a Privacy Complaint if Your Data Was Misused

If your ID, selfie, contacts, phone number, or personal details were used or disclosed, consider an NPC complaint.

The NPC requires formal complaints to follow a specific format: download the complaint form, print and fill it out, have it notarized, then submit it in person, by courier, or by scanned email submission. (National Privacy Commission)

Attach:

Government ID
Screenshots and call logs
Messages from collectors
Proof your contacts were messaged
Your written denial to the lender
The lender’s reply or refusal to reply
Proof that your data is inaccurate or unauthorized
Affidavit explaining what happened

Step 7: Check and Dispute Your Credit Report

If the matter looks serious, check whether the loan appears in your credit record.

The Credit Information Corporation (CIC) is the public credit registry created under Republic Act No. 9510, the Credit Information System Act. Its Online Dispute Resolution System is designed to resolve discrepancies between data submitted by financial institutions and what the consumer sees in the credit report. CIC explains that it cannot unilaterally change data and relies on the dispute process involving the consumer and the submitting entity. (Credit Information Corporation)

A credit dispute is especially important if:

You were rejected for a credit card or loan because of an unknown account
A collection account appears under your name
The lender reports late payments for a loan you deny
You are an OFW or foreigner whose Philippine credit record may affect local banking, leasing, or employment requirements

Step 8: Report to Cybercrime Authorities When There Is Identity Theft or Fraud

For cybercrime complaints, the NBI Cybercrime Division’s citizen charter states that the general public may file a complaint or request for investigation, undergo preliminary interview, execute sworn statements or submit prepared affidavits, and provide supporting documents. The listed frontline processing time for initial steps is short, but actual investigation timelines depend on the facts, traceability of accounts, subpoenas, platform cooperation, and prosecutorial review. (National Bureau of Investigation)

Bring or prepare:

Printed screenshots
Digital copies on a USB or device
Valid IDs
Affidavit or written narrative
Proof of account ownership
Any bank/e-wallet details used by the scammer
Names and numbers of callers or collectors
Copies of reports already filed with the lender, SEC, BSP, NPC, CIC, NTC, or CICC

What If Collectors Start Harassing You?

Do not panic and do not pay just to stop the calls. Payment may later be treated as acknowledgment unless clearly documented as made under protest or for another specific reason.

Instead:

Ask for the collector’s full name, company, authority to collect, and written proof of debt.
State clearly that the debt is disputed.
Tell them to communicate in writing.
Save all threats and abusive messages.
Report privacy violations to the NPC.
Report SEC-regulated lenders or collection agents to the SEC.
Report threats, extortion, identity theft, or cyber harassment to cybercrime authorities.

The SEC lists Memorandum Circular No. 18, Series of 2019 as the rule prohibiting unfair debt collection practices of financing companies and lending companies, and Memorandum Circular No. 19, Series of 2019 as covering disclosure requirements on advertisements and reporting of online lending platforms. (SEC Appointment System)

Common abusive practices include:

Threatening imprisonment for ordinary debt
Messaging your employer, relatives, or contacts
Posting your photo or ID online
Calling you a scammer publicly
Sending fake barangay, police, or court threats
Demanding payment without proof of the loan
Refusing to identify the collector or principal lender

Unpaid debt by itself is generally a civil matter. But fraud, identity theft, falsification, threats, unjust vexation, cyber libel, extortion, or data privacy violations may create separate criminal or administrative issues.

What Documents Should You Prepare?

Document	Why it helps
Screenshots of the loan approval message	Shows the origin, date, wording, and link
Call logs and recordings, if lawfully obtained	Shows harassment pattern and caller details
Written denial sent to lender	Proves you promptly disputed the account
Lender’s reply or non-response	Shows whether the lender verified properly
Valid government ID	Required for most complaints
Affidavit of denial or identity theft	Useful for banks, SEC, NPC, NBI, PNP, and prosecutors
Credit report	Needed if the loan appears in your credit record
Proof of residence or contact ownership	Helps connect you to the number/email used
Bank/e-wallet statements	Shows whether you received or did not receive proceeds
Reports filed with agencies	Shows diligence and helps avoid repeated explanations

Special Situations for OFWs and Foreigners

If You Are Abroad

If you are a Filipino abroad and need someone in the Philippines to file or follow up for you, agencies or institutions may ask for a Special Power of Attorney (SPA). Depending on the use, this may need notarization before a Philippine Embassy or Consulate, or proper authentication/apostille. The DFA’s apostille portal provides official information on authentication and documentary requirements, including representative requirements and consular notarization in certain situations. (Apostille Authority)

Practical tips:

Use the same signature as your passport or Philippine ID.
Attach a copy of your passport and Philippine ID, if any.
State the specific authority: to file complaints, request records, dispute credit data, receive notices, and sign related documents.
Do not give broad authority to borrow, settle, compromise, or access bank funds unless truly necessary.

If You Are a Foreigner in the Philippines

Foreigners can still be victims of loan scams or identity misuse. A lender may have used your passport, ACR I-Card, Philippine mobile number, work address, or local bank/e-wallet account.

Prepare:

Passport bio page
Visa page or latest entry stamp, if relevant
ACR I-Card, if any
Local address proof
Philippine mobile number proof
Employment or business records, if relevant
Screenshot of the loan message
Written denial

If a foreign document must be used in a Philippine proceeding or agency process, ask the receiving office what form of notarization, consular acknowledgment, or apostille is required. Requirements vary depending on whether the document was executed in the Philippines, before a Philippine consular officer, or before a foreign notary.

Common Mistakes to Avoid

Clicking “Cancel Loan” Links

Scam messages often use fake cancellation links. The link may lead to a phishing page that asks for your ID, OTP, or e-wallet login. If you need to cancel or dispute anything, go directly to the provider’s official channel.

Paying a “Cancellation Fee”

Legitimate cancellation or dispute processes should not require you to pay a random e-wallet or personal bank account. A demand for a release fee, verification fee, notarial fee, or cancellation fee is a classic scam indicator.

Sending Your ID to Unknown Chat Support

Do not send your ID through a link or messaging app unless you are certain you are dealing with the official provider. If the provider is legitimate, upload documents only through its official app, website, branch, or verified support channel.

Ignoring the Message Completely

Many messages are spam, but ignoring a message can be risky if your identity was actually used. At minimum, preserve evidence and verify whether an account exists.

Arguing With Collectors by Phone

Phone arguments rarely help. Written disputes are better. Ask for proof, deny liability clearly, and keep records.

Posting the Collector’s Personal Details Online

You can warn others without exposing private personal information. Posting someone’s number, photo, or identity online may create separate privacy or defamation issues, especially if you misidentify the person.

Sample Written Dispute to a Lender

Subject: Unauthorized Loan Approval Message / Identity Theft Concern

I received a message stating that a loan was approved under my name or contact details. I did not apply for, accept, receive, or authorize any such loan. I do not acknowledge any debt.

Please confirm whether your company has any application, account, loan, or collection record under my name, mobile number, email address, government ID, or other personal information. If yes, please provide copies of all records, including the application form, loan agreement, disclosure statement, uploaded IDs, selfie or verification records, consent logs, IP address/device information, disbursement details, and collection history.

Please tag the matter as disputed, stop any collection activity while verification is pending, preserve all records, and refrain from reporting or continuing to report inaccurate information to any credit registry.

I also request correction, blocking, or deletion of any personal information that was unlawfully obtained, inaccurate, unauthorized, or no longer necessary for a lawful purpose.

Frequently Asked Questions

Is a loan approval text legally binding in the Philippines?

No. A text saying a loan is “approved” does not automatically prove that you borrowed money. A valid loan still requires consent and proof that you applied, accepted the terms, and received or were credited the proceeds. The lender must be able to show reliable records.

Can I be jailed for a loan I never applied for?

You should not be jailed merely because someone claims you owe a loan. Ordinary unpaid debt is generally civil, not criminal. However, if someone used your identity, that person may have committed identity theft, fraud, falsification, or related offenses. If collectors threaten jail without proof, document the threats and report them.

What if the message came from a real lending app?

A real app name does not automatically mean the message is legitimate. Scammers can impersonate real brands. Verify through the app’s official website, verified customer service, SEC records, or official app store listing. Do not use the message link.

What if money was sent to my e-wallet or bank account?

Do not spend it. Report immediately to the financial institution and ask for instructions in writing. If the money came from a fraudulent loan or scam, spending or transferring it may complicate your position. Preserve the transaction record and report the incident.

What if collectors are calling my relatives or employer?

Ask the collector for proof of debt and authority to collect. If they disclose your alleged debt to third parties, shame you, threaten you, or misuse your contacts, consider complaints with the SEC for lending/financing companies and the NPC for data privacy violations.

How do I remove a fake loan from my credit report?

First get a copy of your credit report. Then dispute the inaccurate loan with the submitting lender and through the CIC Online Dispute Resolution System. Prepare your written denial, IDs, screenshots, and any proof that you did not apply for or receive the loan.

Should I file a police blotter?

A blotter can help create a dated record, especially if there are threats or identity theft. But for online scams and cyber identity misuse, also consider reporting to cybercrime authorities such as the CICC, PNP Anti-Cybercrime Group, or NBI Cybercrime Division. A barangay or police blotter alone may not correct your credit record or stop a regulated lender.

Can I report the scam number?

Yes. For scam texts, you can report to the NTC text scam channel, the eGov app’s eReport feature, and CICC Hotline 1326. Include screenshots showing the sender number and full message.

Do I need a notarized affidavit?

For simple customer service disputes, usually not at first. For NPC complaints, cybercrime complaints, credit disputes, or formal records correction, a notarized affidavit or sworn statement is often useful and may be required depending on the office or stage of the process.

What if I am an OFW and cannot appear personally?

You can usually start by emailing the lender or filing online reports where available. If someone in the Philippines must represent you, prepare a specific SPA and ask the receiving office whether consular notarization, apostille, or another form of authentication is required.

Key Takeaways

A loan approval message for a loan you never applied for may be a scam, wrong-number message, marketing spam, or identity-theft warning.
Do not click links, send OTPs, upload IDs, or pay release/cancellation fees.
A valid loan requires consent; do not acknowledge any debt unless the lender proves the application, acceptance, and disbursement.
Preserve screenshots, call logs, links, payment instructions, and written communications.
Verify only through official lender channels, SEC records, BSP-supervised institution channels, or agency complaint portals.
Use the right complaint route: SEC for lending/financing companies, BSP for BSP-supervised institutions, NPC for data misuse, CIC for credit report errors, and cybercrime authorities for fraud or identity theft.
If the loan appears in your credit report, dispute it promptly with the lender and the CIC.
If you are abroad, prepare clear written authority and proper notarization, consular acknowledgment, or apostille when required.