What to Do If Your National ID Was Used for a Fraudulent Loan

Finding out your National ID was used to open a loan you never applied for is stressful, but the process for addressing it in the Philippines is well established, even if it takes coordinating across a few different agencies. Acting quickly and documenting everything as you go — rather than waiting to see if the problem resolves on its own — makes each of the steps below faster and more likely to succeed.

Signs Your ID May Have Been Misused

• Collection calls, texts, or emails about a loan you never applied for
• Unfamiliar loan accounts appearing when you pull your own credit report
• Notifications (OTPs, welcome emails, payment reminders) from a lending app you never registered with
• Reports from contacts that they received calls or messages referencing a loan under your name — a pattern strongly associated with unauthorized contact-list access
• Your National ID or a photo of it surfacing somewhere you didn't submit it (for example, a lender referencing details you never gave them directly)

Immediate Steps to Take

Work through these roughly in order. Each step tends to produce documentation the next step relies on, so skipping ahead can slow down resolution rather than speed it up.

Step 1 — Contact the Lending App or Company

Explain in writing (email is best, so there’s a timestamped record) that you did not apply for the loan and request an internal fraud investigation. Ask specifically for confirmation in writing that the account is frozen or flagged as disputed while the investigation proceeds, and request a copy of whatever application data they have on file, including the date, device, and ID images submitted — this helps establish how the fraud happened.

Step 2 — Report to the SEC

If the lender is SEC-registered, file a complaint describing the fraudulent application through the SEC's official complaint process (see our SEC verification guide for how to find and confirm registration details first). If the lender turns out to be unregistered, report the unauthorized lending activity itself — this matters both for your case and to help regulators act against the operator.

Step 3 — File a Complaint with the NPC

If your ID or personal data was misused, submitted without your consent, or mishandled, file through the National Privacy Commission's online eComplaint Portal (complaints.privacy.gov.ph), which issues an instant docket number to track your case. The NPC specifically handles Data Privacy Act violations, which covers unauthorized use of your National ID data to open an account in your name.

Step 4 — Report to the PNP Anti-Cybercrime Group

For identity theft or online fraud, file a formal police report with the PNP-ACG. A police or NBI report supports your case and is often required as supporting evidence for other disputes, though by itself it doesn't automatically compel a lender to erase the fraudulent account — you'll typically still need to pursue the lender and CIC processes in parallel.

Step 5 — Dispute the Entry with the Credit Information Corporation

The CIC, established under the Credit Information System Act (Republic Act 9510), maintains centralized credit data submitted by banks and lenders. Request your own credit report first, then use the CIC's Online Dispute Resolution Process at creditinfo.gov.ph/dispute to formally flag the unrecognized account — notably, this process itself uses PhilSys National ID authentication with a liveness check to confirm your identity before you can file. You'll need your credit report's 14-digit Transaction Reference Number (the report must be less than 30 days old), and you can specify that you never applied for or authorized the disputed account. The CIC will notify the lender and facilitate resolution based on evidence from both sides, so the documentation you gathered in Step 1 matters here too.

How to Prevent This From Happening Again

• Only submit your National ID to lenders you've independently verified as SEC- or BSP-registered, using our verification guide rather than trusting what the app displays — or start from our Top Loan Apps That Accept Digital National ID guide, where this check is already done
• Avoid sharing photos of your ID over unsecured channels like public chat groups, social media DMs, or unofficial "processing agents" who claim they can speed up a loan or registration
• Review the permissions and privacy policy of any app before granting access to your ID, and decline anything asking for your contacts, gallery, or SMS beyond what verification requires
• Periodically request your own CIC credit report, even without a specific reason to suspect fraud, so an unauthorized account doesn't sit unnoticed for months
• Keep your physical PhilSys ID, ePhilID files, and Transaction Slip stored securely, and avoid leaving printed copies where others can photograph or copy them

Frequently Asked Questions

Last updated: January 2026

Written and reviewed by Adrian Cruz

Adrian covers consumer lending and digital identity in the Philippines, tracking how banks and lending apps adopt PhilSys verification. Read more about Adrian →