Quick answer
If a loan, credit card, credit line, buy-now-pay-later account, or similar facility was opened in your name without your consent, dispute it immediately in writing with the lender. State clearly that you did not apply for, authorize, receive, or benefit from the account. Ask the lender to flag it as identity theft, stop collection activity, suspend interest and charges while investigating, preserve the application and authentication records, and correct any credit information it reported.
Using your name or ID does not by itself create a valid debt against you. Consent is essential to a contract. The Supreme Court has held that a contract bearing a forged signature lacks consent and is fictitious or void from the beginning. Whether a particular account was truly unauthorized, however, depends on evidence—including application records, electronic authentication, delivery of proceeds, and anything you or an authorized representative did afterward.
Report separately to:
- The lender’s fraud or consumer-assistance unit;
- The appropriate regulator—usually the Bangko Sentral ng Pilipinas (BSP), Securities and Exchange Commission (SEC), Cooperative Development Authority (CDA), or Insurance Commission (IC);
- The Credit Information Corporation (CIC), if the false account appears in your CIC credit report;
- The National Privacy Commission (NPC), if your personal data was unlawfully used or the lender refuses appropriate correction; and
- The National Bureau of Investigation (NBI), police, or other law-enforcement authority when identity theft, forgery, fraud, or unauthorized computer use is involved.
A police blotter or affidavit can support your dispute, but it does not automatically cancel the account. Likewise, reporting only to a regulator does not replace the need to dispute directly with the lender.
Act quickly, but preserve evidence first
Before deleting messages, closing accounts, replacing a phone, or confronting a suspected offender, preserve what may show how and when the fraud occurred.
Keep copies of:
- Collection texts, emails, letters, call logs, voicemails, and app notifications;
- Screenshots showing the lender or app name, account number, amount, dates, sender, URL, and time;
- The envelope and delivery details for any physical card or collection letter;
- Your credit report and the page showing the disputed account;
- Any application, promissory note, disclosure statement, signature page, selfie, ID image, or account statement supplied by the lender;
- Proof of where you lived and worked when the account was opened, if relevant;
- Your genuine signatures and valid IDs from the same period;
- Reports of a lost ID, phone, SIM, email account, or data breach;
- Communications with the suspected offender, without editing or annotating the originals;
- Every complaint reference number and the date, time, channel, and name of the person who received your report; and
- Proof that the lender received your written dispute, such as an email acknowledgment, courier tracking, or branch-stamped copy.
Keep original files where possible. Screenshots are useful, but exported emails, original electronic files, account statements, and complete message threads may contain more reliable metadata.
Secure the accounts that could be used again
Identity theft involving credit often means that an email address, mobile number, SIM, financial account, or ID image has also been compromised.
As soon as it is safe to do so:
- Change the password of the email account connected to your financial services. Sign out other sessions and enable multi-factor authentication.
- Change passwords and PINs for banking, e-wallet, shopping, government, and social-media accounts. Do not reuse passwords.
- Call your mobile provider if your SIM stopped working unexpectedly or you suspect a SIM replacement or takeover.
- Review recent transactions, beneficiaries, device registrations, recovery email addresses, and contact details.
- Notify other financial institutions where the same ID, email address, phone number, or password may have been used.
- Report a lost government ID to its issuing agency and follow that agency’s replacement or blocking procedure.
- Do not send another full, unredacted ID through an unofficial social-media account or to a collector whose authority you have not verified.
Use contact details from the lender’s official website, app, statement, or BSP/SEC records—not a number supplied only in a suspicious message.
Dispute the account directly with the lender
Send the dispute to the lender’s official fraud, consumer-assistance, complaints, and data-protection channels. If a collection agency is contacting you, notify both the agency and the lender that appointed it.
Your notice should identify the account without unnecessarily exposing more personal data and should say:
I dispute this account as unauthorized and the result of identity misuse. I did not apply for, consent to, sign, authorize, receive, use, or benefit from this loan or credit account. Please flag the account as disputed identity theft, stop collection while it is investigated, suspend interest, fees, and charges, preserve all relevant records, and give me the investigation reference number and written result.
Request the following, subject to lawful redactions and legitimate security restrictions:
- The complete application and contract;
- The IDs, photographs, signatures, selfies, videos, or biometric checks submitted;
- The phone number, email address, address, employer, references, and device information used;
- Application timestamps, IP address, device or session logs, one-time-password records, and authentication results;
- Call recordings, chat logs, branch CCTV, agent records, and delivery records;
- The bank account, e-wallet, merchant, or other destination to which proceeds were released;
- The identity and authority of any agent, broker, merchant, or collection company involved;
- The lender’s basis for concluding that you applied or consented;
- The entities to which the account or delinquency was reported; and
- Written confirmation of any cancellation, correction, blocking, or credit-data update.
Also send a preservation request. Digital logs, call recordings, CCTV, and third-party records may be retained only for limited periods.
Under the Financial Products and Services Consumer Protection Act, Republic Act No. 11765, covered financial service providers must maintain a free consumer-assistance mechanism. For a disputed amount or unauthorized transaction, the provider must suspend interest, fees, and charges pending its final investigation report, or provide a similar reasonable accommodation. Ask for that protection expressly.
Do not accept a “pay first, investigate later” arrangement without legal advice. Do not sign a restructuring agreement, settlement, acknowledgment of debt, or waiver merely to stop collection calls. A payment or signed document could complicate the factual dispute, even if it does not necessarily decide liability by itself.
The lender must investigate—not merely rely on matching ID details
A lender should not reject an identity-theft dispute solely because the application contains your correct name, birth date, address, or ID number. Those are precisely the details an identity thief may have obtained.
Relevant questions include:
- Who actually submitted the application?
- What verification did the lender perform?
- Was the phone number or email address yours at the time?
- Where was the OTP delivered, and what other authentication was used?
- Did the signature, selfie, voice, device, or location match you?
- Where did the money, card, goods, or credit benefit go?
- Did you authorize an agent or family member?
- Did you receive or use any proceeds?
- Did you later approve, adopt, or knowingly benefit from the transaction?
The Supreme Court’s decision in M.Y. Intercontinental Trading Corp. v. St. Mary’s Publishing Corp., G.R. No. 249715 confirms the basic rule that consent is essential and that a forged signature does not perfect a contract. Still, forgery and lack of authorization are factual matters that may require document examination, electronic records, witness testimony, or court findings.
The analysis may be different if you knowingly gave another person authority to apply, shared an OTP to approve the application, signed incomplete documents, received the proceeds, or used the credit. Disclose the facts accurately to your lawyer and the investigator; do not describe an authorized transaction as identity theft.
Escalate to the correct financial regulator
First complain to the financial service provider itself. Keep its acknowledgment, reference number, response, and stated turnaround time. Then escalate if it fails to act, gives an inadequate response, continues collection without addressing the fraud claim, or refuses correction.
| Provider |
Primary regulator and route |
| Bank, digital bank, credit-card issuer, e-money issuer, or other BSP-supervised institution |
Escalate through the BSP Consumer Assistance Mechanism, normally after using the institution’s Financial Consumer Protection Assistance Mechanism. BSP accepts complaints through its BOB chatbot or the official Complaints, Inquiries and Requests form. |
| SEC-licensed lending or financing company, including its online lending platform |
File through the SEC iMessage ticketing system and choose the service for complaints on financing and lending companies. Attach your dispute, the company’s response, and supporting evidence. |
| Savings-and-credit cooperative |
Complain through the cooperative’s internal mechanism, then to the CDA. Cooperative banks remain under BSP supervision, while insurance cooperatives fall under the IC. |
| Insurance, pre-need, or HMO provider offering the disputed financial product |
Use the provider’s complaint process, then the IC where the product is within its jurisdiction. |
| Unknown or apparently unlicensed lender |
Report to the SEC and law enforcement. Do not give the operator additional IDs, selfies, OTPs, or remote access to your phone. |
A regulator can address the provider’s conduct and consumer-redress obligations. Criminal responsibility for the identity thief is handled separately by law enforcement and prosecutors. A regulator also may not be able to decide every private factual or damages dispute through an informal complaint; formal adjudication or a court case may be necessary.
Check and dispute your CIC credit report
Even after a lender internally closes an account, inaccurate credit data may remain unless it is formally corrected.
Obtain your report only through the channels listed on the CIC’s official credit-report page. Review all names, addresses, lenders, account dates, balances, payment histories, and inquiry information.
If the unauthorized account appears:
- Identify the submitting entity and the precise information that is wrong.
- Use the CIC Online Dispute Resolution Process.
- Supply the transaction reference number from your credit report and the email address used to obtain it.
- Attach the lender dispute, identity-theft report, and other supporting records requested through the process.
- Monitor your email and answer document requests promptly.
- Obtain a fresh report after the correction is confirmed.
Under Republic Act No. 9510, the Credit Information System Act, a borrower may dispute erroneous, incomplete, outdated, or misleading credit information. The law directs CIC to investigate and verify disputed information within five working days from receipt of the complaint. If its accuracy cannot be verified and proven, it must be deleted; affected recipients of the information must be notified of the correction or removal.
Under the current CIC dispute procedure, the credit report used for an online dispute generally must have been obtained within the preceding 30 calendar days. If it is older, obtain a new report before filing.
A dispute with CIC concerns information in the CIC database. It does not replace the dispute with the lender, a complaint about unlawful data processing, or a criminal report.
File a privacy complaint when personal data was misused
The Data Privacy Act of 2012 gives data subjects rights that include access, rectification, objection, and—in appropriate circumstances—erasure or blocking. These rights can support requests to learn what data was used, correct false information, and block unlawful processing.
Send a written privacy complaint first to the lender or other organization controlling the data, preferably through its Data Protection Officer. Explain:
- Which personal data was used without authority;
- How you learned of the unauthorized account;
- Which records are false or disputed;
- What correction, restriction, blocking, investigation, or disclosure you request; and
- What harm or continuing risk the processing is causing.
The NPC’s current rules generally require proof that you first informed the organization in writing and that it failed to take timely or appropriate action, or did not respond within 15 calendar days. The NPC may waive this exhaustion requirement for good cause or a serious violation involving risks such as grave and irreparable harm.
A formal NPC complaint must comply with specific requirements, including verification, supporting evidence, correspondence with the respondent, a certification against forum shopping, notarization, and applicable filing fees unless an exemption or waiver applies. Follow the NPC’s current formal complaint instructions and use its prescribed form.
Erasure is not absolute. A lender may have to retain certain records because of legal, regulatory, anti-money-laundering, audit, litigation, or evidence-preservation duties. The practical remedy may be to restrict processing, mark the data as disputed or fraudulent, stop unauthorized disclosure, and correct reports rather than destroy every record.
Report identity theft, forgery, or fraud to law enforcement
Where the application was submitted through a phone, website, app, email, or other computer system, the conduct may fall within computer-related identity theft under the Cybercrime Prevention Act of 2012. Depending on the evidence, access-device fraud, falsification, estafa, illegal access, or other offenses may also be investigated. The correct charge is determined by investigators and prosecutors, not by the label used in your complaint.
You may:
- File through the NBI online complaint portal;
- Approach the NBI Cybercrime Division, Fraud and Financial Crimes Division, or an appropriate NBI regional office;
- Report to the PNP or its anti-cybercrime unit; or
- Make a report at the local police station, particularly when documents or physical IDs were stolen.
Bring a government ID, a chronological written account, the disputed account information, lender correspondence, credit report, original electronic evidence, proof of lost or compromised credentials, and information identifying the suspected person if known. Ask what sworn complaint, affidavit, device submission, or additional evidence is required, and obtain the official docket or reference number.
Do not edit suspected forged documents or secretly access another person’s account to gather evidence. Do not publicly accuse a suspected offender by name without legal advice. Preserve the material and give it to investigators.
If collectors continue contacting you
Tell each collector in writing that:
- The account is disputed as identity theft;
- You deny applying for or authorizing it;
- The lender and relevant authorities have been notified;
- All collection communications must be preserved; and
- The collector should provide the lender’s name, its authority to collect, the account reference, and a written statement of the alleged obligation.
Keep evidence of threats, humiliation, repeated calls, impersonation, disclosure to relatives or employers, social-media posts, or other abusive conduct. Covered financial service providers are prohibited by Republic Act No. 11765 from using abusive collection or debt-recovery practices. SEC-supervised financing and lending companies are also subject to the SEC’s rules against unfair debt collection.
Do not ignore a genuine demand letter, barangay notice, subpoena, summons, or court document. A dispute raised with customer service does not automatically suspend a court deadline.
Common mistakes to avoid
- Reporting only by telephone and keeping no proof;
- Saying merely “I do not recognize this” instead of expressly denying application, consent, receipt, and benefit;
- Paying a token amount or signing a restructuring
Quick answer
If someone used your name, ID, signature, selfie, mobile number, or other personal data to open a loan or credit account without your authority, dispute it immediately with the lender in writing. State clearly that you did not apply for, consent to, receive, use, or benefit from the account. Ask the lender to flag the account as identity fraud, stop collection while it investigates, suspend interest and charges, preserve all application and authentication records, correct any credit reporting, and give you a written result.
Using your identity does not by itself make you the borrower. Consent is essential to a valid contract. The Supreme Court has held that a contract bearing a forged signature lacks the consent needed to perfect it. Whether a particular account is genuinely unauthorized, however, depends on evidence such as application records, authentication logs, signatures, OTP use, disbursement details, and what happened to the proceeds.
Report the incident separately to:
- The lender’s fraud or consumer-assistance unit;
- The lender’s regulator—usually the Bangko Sentral ng Pilipinas (BSP), Securities and Exchange Commission (SEC), Cooperative Development Authority (CDA), or Insurance Commission (IC);
- The Credit Information Corporation (CIC), if the account appears in your credit report;
- The National Privacy Commission (NPC), if your personal data was misused or the lender fails to correct unlawfully processed data; and
- The police or National Bureau of Investigation (NBI), especially when the application was made online, documents were forged, or money was obtained through fraud.
A police blotter or affidavit helps document your prompt denial, but it does not automatically cancel the account. Likewise, a lender’s internal investigation does not replace a criminal complaint or a CIC credit-data dispute.
Act immediately
1. Secure the accounts that may have been compromised
Before contacting a suspected fraudster, protect the channels that may have been used to impersonate you:
- Change the passwords of your primary email, banking, e-wallet, shopping, and government-service accounts.
- Sign out unknown devices and enable multi-factor authentication.
- Replace reused passwords with unique ones.
- Ask your mobile provider to secure or replace a lost or compromised SIM.
- Notify your bank or e-wallet immediately if an unfamiliar account, transfer, cash-out, or beneficiary is involved.
- Check whether your email or mobile account has forwarding rules, recovery details, or linked devices you did not add.
- Do not give anyone an OTP, PIN, password, recovery code, or remote access to your phone—even if the caller claims to be investigating the account.
Use only contact details published on the lender’s official website, app, contract, or regulator listing. Do not rely on a number sent by the person demanding payment.
2. Notify the lender by phone, then dispute in writing
Call the lender’s official fraud hotline or consumer-assistance channel to stop immediate activity. Obtain the representative’s name, case number, and exact submission instructions.
Follow up the same day by email, portal, registered mail, courier, or personal filing. Written notice creates a dated record and is important if you later complain to a regulator or the NPC.
Your notice should say:
I formally dispute Loan/Credit Account [reference number] as unauthorized and fraudulently opened using my identity. I did not apply for or consent to this account, authorize another person to open it, sign its documents, or receive or use its proceeds. Please flag the account as disputed identity fraud, stop collection and adverse reporting while it is investigated, suspend interest, fees, and charges, preserve all relevant records, and provide a written investigation result and correction of all records associated with my identity.
Include only the information reasonably needed to identify the disputed account. If the lender requests another copy of your ID, use a secure official channel and, when accepted, watermark the copy—for example, “For identity-fraud dispute with [lender], [date] only.” Do not post your evidence publicly.
3. Ask for specific action, not merely “account closure”
Request that the lender:
- Mark the account as formally disputed due to identity fraud;
- Block further drawdowns, purchases, disbursements, limit increases, or account changes;
- Stop collection calls and referrals while the dispute is being investigated;
- Suspend interest, fees, and charges or provide equivalent reasonable accommodation;
- Prevent new adverse credit reporting and correct data already submitted;
- Tell its collection agency and other service providers that the account is disputed;
- Preserve all physical and electronic evidence;
- Investigate how identity verification was completed;
- Give you a written final investigation report or sufficiently detailed written resolution; and
- Confirm that you have no liability if the account is found to be unauthorized.
Under the Financial Products and Services Consumer Protection Act, Republic Act No. 11765, regulated financial service providers must offer free consumer assistance. For an alleged disputed amount or unauthorized transaction, the provider must suspend interest, fees, and charges pending its final investigation or give similar reasonable accommodation.
Do not assume that “closed” means “cleared.” An account may be closed yet remain recorded as delinquent or assigned to a collector. Ask expressly for correction of the balance, account status, ownership, collection records, and credit information.
Request the records that show how the account was opened
Invoke your right to access and correct personal data. Ask for copies or a clear description of the following, subject to lawful redactions and legitimate security restrictions:
- The complete application and loan or credit agreement;
- The ID documents, signatures, selfies, videos, or facial-verification results submitted;
- The declared mobile number, email address, home address, employer, references, and emergency contacts;
- Application date, time, channel, branch, agent, merchant, or online platform;
- OTP, electronic-signature, device, IP-address, login, and authentication records;
- Call recordings, chat transcripts, and verification notes;
- The account into which proceeds were released, including the receiving institution and masked account details;
- Cash-pickup, delivery, merchant, or disbursement records;
- Subsequent changes to contact information or account credentials;
- Names of credit bureaus, collection agencies, affiliates, and other recipients to whom the account data was disclosed; and
- The legal and factual basis for treating you as the borrower.
Ask the lender to preserve these records even if it cannot immediately release all of them. A preservation request is important because device logs, CCTV recordings, call recordings, and third-party records may be retained for limited periods.
The Data Privacy Act of 2012 gives data subjects rights of access and rectification and, in appropriate cases, erasure or blocking. Erasure is not absolute: a lender may have to retain some records because of legal, regulatory, anti-fraud, or litigation obligations. The practical request is to block unauthorized use, correct false account data, retain evidence securely, and stop treating the information as proof that you incurred the debt.
Preserve evidence
Keep the original files and organize copies by date. Preserve:
- Demand letters, envelopes, statements, emails, texts, and app notifications;
- Screenshots showing the full sender, account name, URL, date, and time;
- Call logs and the names or numbers used by collectors;
- Your written dispute and proof that the lender received it;
- Case numbers and written replies from the lender and regulators;
- Copies of IDs allegedly used, including differences in photo, signature, address, or issue date;
- Proof of where you were when the application or in-person verification occurred;
- Your genuine signature samples created before the disputed transaction;
- Evidence that the mobile number, email, device, bank account, e-wallet, address, or employer used was not yours;
- Bank or e-wallet statements showing that you did not receive the proceeds;
- Evidence of a lost ID, SIM, phone, email takeover, phishing incident, or data breach;
- Names and statements of witnesses; and
- Any message from a person admitting, threatening, or asking you to conceal the transaction.
Do not edit original screenshots, crop out identifying details, or delete messages after saving only a few images. Export conversations where possible and back up the evidence in a second secure location.
Do not secretly access another person’s account or device to obtain proof. Give investigators the information you lawfully possess.
Report to the correct financial regulator
First use the financial service provider’s own complaint mechanism. If its response is unsatisfactory, it does not act, or collection continues without a fair investigation, escalate to the regulator identified in the provider’s official materials.
| Provider involved |
Usual regulator and route |
| Bank, digital bank, credit-card issuer, BSP-supervised financing service, e-money issuer, pawnshop, or other BSP-supervised institution |
File first with the institution’s Financial Consumer Protection Assistance Mechanism. Then use the BSP Consumer Assistance Mechanism, including the BSP Online Buddy or the official complaint form and email channel. |
| SEC-licensed lending or financing company, including its online lending platform |
File with the company first, then submit a ticket under complaints on financing and lending companies through the SEC iMessage system. |
| Savings-and-credit cooperative |
Complain to the cooperative, then the CDA. Cooperative banks and other BSP-supervised cooperative financial institutions remain under BSP jurisdiction. |
| Insurance cooperative or credit connected with a regulated insurance product |
Complain to the provider, then the IC where the matter falls within its jurisdiction. |
| Unknown, unlicensed, or fake lender |
Report to law enforcement. If it represents itself as a lending or financing company, also notify the SEC. Do not provide more IDs or pay a supposed “verification,” “cancellation,” or “clearance” fee. |
Attach your written dispute, proof of receipt, the provider’s response or inaction, account details, collection evidence, and the precise relief you want.
BSP’s process requires the consumer to raise the concern first with the BSP-supervised institution. If the matter remains unresolved, it may be escalated to BSP. A later formal BSP adjudication has additional requirements and is limited to claims within its jurisdiction; under Republic Act No. 11765, BSP and SEC adjudication of purely civil financial claims for payment or reimbursement is capped at ₱10 million.
Check and dispute your CIC credit report
Even if collection stops, the unauthorized account may affect later applications for housing, employment-related credit checks, postpaid services, or legitimate loans.
Obtain your report using a method listed on the CIC’s current credit-report page. Review the identity details, lender name, account type, opening date, balance, payment status, and reporting history.
If the unauthorized account appears, use the CIC Online Dispute Resolution Process. Under the CIC’s current procedure:
- The dispute must identify erroneous, incomplete, outdated, or misleading information in a CIC credit report.
- You need the report’s Transaction Reference Number.
- The report generally must have been obtained from CIC or a CIC special accessing entity within the preceding 30 calendar days; otherwise, obtain a new report.
- Use the same email address used to obtain the report.
- Respond promptly to requests for supporting documents.
The Credit Information System Act, Republic Act No. 9510, gives a borrower the right to dispute erroneous, incomplete, outdated, or misleading credit information. It directs CIC to investigate and verify disputed information within five working days from receipt of the complaint. If accuracy cannot be verified or proven, the disputed information must be deleted, and affected recipients must be informed of the correction or removal within the statutory period.
A CIC dispute corrects information in the central credit system. It does not replace your dispute with the lender, because the lender is the source that may continue submitting the false account.
File a privacy complaint when personal data was misused
Write first to the lender’s Data Protection Officer or privacy contact. Identify the unauthorized processing and request access, correction, blocking, investigation, and disclosure of the source and recipients of the data.
Under the NPC’s current Rules of Procedure, a formal complaint ordinarily will not be given due course unless you show that:
- You informed the personal information controller, processor, or concerned entity in writing; and
- It failed to take timely or appropriate action, or did not respond within 15 calendar days after receiving your written notice.
The NPC may waive this exhaustion requirement for good cause or a serious privacy violation, including circumstances involving grave and irreparable harm, no adequate remedy, or patently illegal action.
A formal NPC complaint must comply with procedural requirements. It is generally verified, notarized, supported by evidence and correspondence, and accompanied by a certification against forum shopping. Filing fees may apply unless an exemption or waiver is available. Consult the NPC’s current formal complaint instructions and form before filing.
An NPC complaint is appropriate for unlawful collection, use, disclosure, inadequate security, refusal to rectify false data, or other violations of privacy law. The NPC does not decide every issue concerning the existence or payment of a private debt, so regulatory, civil, and criminal remedies may still be necessary.
Make a law-enforcement report
If the identity was used through a phone, computer, online application, email, app, or digital document, the conduct may fall within computer-related identity theft under the Cybercrime Prevention Act, Republic Act No. 10175. Depending on the facts, access-device fraud, estafa, falsification, illegal access, or other offenses may also be investigated. The investigator and prosecutor—not the lender or complainant—determine the proper offense.
You may:
- Make a police report or blotter entry at the appropriate police station;
- Seek cybercrime investigation through the NBI Cybercrime Division or an NBI regional office;
- Use the NBI’s official online complaint page; or
- Report a cybercrime incident through the DOJ Office of Cybercrime.
Bring a government ID, a chronological affidavit or written narrative, the unauthorized account details, lender correspondence, electronic evidence, proof concerning the proceeds, and any information identifying the suspect. Ask for a complaint or docket reference and a certified copy or other official proof of your report when available.
Do not delay solely because you do not know who did it. State what you know and distinguish facts from suspicions. If you suspect a relative, coworker, agent, or former partner, avoid confrontation that could lead to evidence being deleted or put you in danger.
Deal carefully with collectors
Tell every collector in writing:
- The account is disputed as identity fraud;
- You did not incur or authorize the debt;
- The lender and relevant agencies have been notified;
- All communications and records must be preserved; and
- Further contact should be made through a specified written channel.
Do not disclose relatives’ contact details, send new selfies, install a collection app, or click links supplied in threatening messages.
Republic Act No. 11765 prohibits regulated providers from using abusive debt-recovery practices. SEC-regulated lending and financing companies are also covered by SEC Memorandum Circular No. 18, Series of 2019, which prohibits unfair collection practices. Save threats, public posts, disclosure to third parties, impersonation, repeated harassment, or misleading claims for submission to the lender, regulator, NPC, and law enforcement as appropriate.
Do not make these common mistakes
- Do not ignore the account. Silence allows interest, collection activity, and incorrect credit reporting to continue.
- Do not rely only on a phone call. Follow up in writing and keep proof of receipt.
- Do not pay a token amount merely to stop calls. The lender may later cite the payment as evidence concerning the account. Obtain legal advice before making any payment or settlement.
- Do not sign a restructuring, waiver, promissory note, or settlement for a debt you deny.
- Do not say “I cannot pay.” Say, if true, “I did not apply for, authorize, receive, or use this account.”
- Do not accuse a specific person without evidence. Give investigators the facts and basis for any suspicion.
- Do not send additional personal data to unofficial accounts.
- Do not treat a police blotter as the complete remedy. Continue the lender, regulator, CIC, and privacy disputes.
- Do not demand deletion of all evidence. Ask the lender to preserve fraud evidence while blocking unauthorized use and correcting false account data.
- Do not miss a court or agency deadline. A pending internal investigation normally does not suspend a summons, subpoena, or official order.
When legal help is urgent
Consult a lawyer immediately if:
- You receive court summons, a subpoena, a prosecutor’s notice, or an agency adjudication order;
- A lender has sued you or obtained a judgment;
- Your salary, bank account, vehicle, land, condominium, or other property is being attached, foreclosed, repossessed, or encumbered;
- The unauthorized loan is secured by a mortgage, title, vehicle, check, or notarized document;
- The lender claims you authenticated the application with an OTP, selfie, biometrics, or electronic signature;
- The proceeds entered an account you own, or someone alleges that you used or retained them;
- You previously gave another person authority to transact for you and the dispute concerns the scope of that authority;
- You signed a document without understanding that it was a loan, guarantee, or mortgage;
- A collector is threatening arrest, violence, exposure, or contact with your employer or family;
- Multiple accounts have been opened, suggesting continuing identity compromise; or
- The lender rejects the dispute despite strong evidence of forgery or mismatched identity data.
For an ordinary civil complaint, the general rule is that an answer must be filed within 30 calendar days after service of summons unless the court fixes a different period. The summons and applicable special rules control, so take the complete papers to a lawyer immediately. Do not wait for the lender’s customer-service investigation to finish.
If you cannot afford private counsel, ask the Public Attorney’s Office, an IBP legal-aid office, a law-school legal-aid clinic, or another accredited legal-aid provider whether you qualify for assistance.
Frequently asked questions
Am I required to pay because the loan is under my name?
Not merely because your name or ID appears on it. A valid obligation requires consent and proof connecting you to the transaction. The Supreme Court’s decision in M.Y. Intercontinental Trading Corp. v. St. Mary’s Publishing Corp. confirms that a contract bearing a forged signature lacks the consent necessary to perfect it. Liability remains fact-dependent, especially where authentication credentials or proceeds are linked to you.
Should I pay first and dispute later?
Generally, do not pay or sign a settlement for an account you deny without legal advice. Promptly dispute the account and request suspension of interest, fees, charges, and collection while it is investigated.
Is an affidavit of loss or identity theft enough?
No. It is useful supporting evidence, particularly if an ID, SIM, phone, or document was lost, but the lender and relevant agencies must still evaluate the underlying records.
What if the lender says an OTP proves that I borrowed?
An OTP is relevant but not automatically conclusive. Ask where it was sent, who controlled the number, what device and IP address were used, whether the SIM had recently been replaced, and what other identity checks were completed. If you knowingly gave the OTP to another person, the legal and factual analysis becomes more difficult and requires individual advice.
What if the proceeds were sent to my account?
Notify the institution immediately and do not spend, transfer, or return the money based on instructions from an unknown person. Ask the institutions involved to secure the funds and document the lawful return process. Receipt, use, or retention of proceeds can materially affect the dispute.
Can I report the lender and the identity thief at the same time?
Yes. The lender dispute, regulatory complaint, CIC correction, privacy complaint, and criminal investigation serve different purposes and may proceed in parallel. Disclose related proceedings when a complaint form or certification requires it.
What if the lender refuses to show me the application?
Repeat the request in writing to its consumer-assistance unit and Data Protection Officer. Identify the personal data and records sought, explain why they are necessary to correct identity fraud, and ask for the legal basis for any refusal. Escalate to the appropriate financial regulator and, for a privacy-rights issue, the NPC.
What if the unauthorized account is not yet in my CIC report?
Continue disputing it directly with the lender and ask the lender not to report it as yours. Keep checking your credit report. CIC can correct data appearing in its system, but the originating lender must also correct its own records and future submissions.
Can the lender keep contacting me during the investigation?
It may communicate about the investigation, but abusive collection is prohibited. Ask that communications be limited to a designated written channel and that collection activity be suspended while ownership of the account is disputed. Preserve evidence of harassment or disclosure to third parties.
Official sources
This article provides general Philippine legal information, not legal advice for a particular case. Outcomes depend on the documents, authentication evidence, disbursement trail, authority given to others, and procedural history. Official sources and procedures were checked as of 3 August 2026.