Online lending has become common in the Philippines because it is fast, convenient, and often accessible through mobile apps. But the same convenience has also made the sector attractive to scammers, abusive collectors, and unregistered lending operators. Before borrowing money from an online lending company, a borrower should verify whether the lender is legally registered, authorized to lend, transparent about its charges, compliant with privacy rules, and respectful of borrower rights.

This article explains how to check whether an online lending company is legitimate in the Philippine legal context.

1. Understand What Makes an Online Lending Company “Legit”

In the Philippines, a legitimate online lending company is not merely a business with a website, app, social media page, or customer service hotline. It must generally have the proper legal personality and authority to operate as a lending company or financing company.

A lending company must typically be registered with the Securities and Exchange Commission, or SEC. It must also have authority to operate as a lending or financing company. If the lender operates through an app, website, or online platform, the app or platform should be associated with a duly registered entity.

A legitimate online lender should therefore have:

A registered corporate name;
SEC registration;
A Certificate of Authority to Operate as a Lending Company or Financing Company, when required;
A physical office address;
Clear loan terms;
Transparent interest rates, fees, penalties, and repayment schedules;
A privacy policy compliant with the Data Privacy Act;
Lawful collection practices;
Identifiable officers, representatives, or customer service channels;
No record of being revoked, suspended, banned, or publicly warned against by regulators.

A lender may look professional online but still be illegal. The important question is not whether the company looks legitimate, but whether it is legally authorized and compliant.

2. Check the SEC Registration

The first step is to verify whether the company is registered with the Securities and Exchange Commission.

In the Philippines, lending companies and financing companies are regulated by the SEC. A company that lends money to the public as a business should not operate informally or anonymously. Registration with the SEC shows that the entity exists as a legal corporation or partnership, but it is not always enough by itself.

A borrower should check the exact name of the company. Many illegal lenders use names similar to legitimate companies to confuse borrowers. The name displayed in the app may not be the same as the registered corporate name. For example, the app may be called “Fast Cash PH,” but the registered company may have a different corporate name. The borrower should identify the entity behind the app.

Look for the following:

What to Check	Why It Matters
Corporate name	Confirms the legal entity behind the lender
SEC registration number	Shows that the company is registered
Certificate of Authority number	Shows authority to operate as a lending or financing company
Registered business address	Helps verify that the company is not anonymous
Names of officers or representatives	Helps identify accountability
App or website name	Should match or be clearly linked to the registered entity

A company may be SEC-registered for a general business purpose but not authorized to operate as a lending company. That is why the Certificate of Authority is crucial.

3. Confirm the Certificate of Authority to Operate

A legitimate lending company should have a Certificate of Authority, often called a CA, issued by the SEC. This is separate from ordinary company registration.

SEC registration means the company exists. A Certificate of Authority means it has permission to conduct lending or financing operations.

Borrowers should be careful of lenders that only show a business permit, barangay clearance, DTI registration, or mayor’s permit. These documents do not necessarily authorize lending activities. A local business permit does not replace SEC authority.

For online lenders, the borrower should verify that the online lending app, website, or platform is connected to the company that holds the Certificate of Authority. Some apps may claim to be operated by one company but actually process loans through another. The relationship should be clear.

Warning signs include:

The lender refuses to provide its SEC registration or Certificate of Authority number.
The app name does not appear to be connected to the registered company.
The company gives only a Facebook page, mobile number, or Telegram account.
The lender claims that SEC registration is unnecessary because it is “online only.”
The lender says it is merely a “loan assistance service” but directly releases and collects loans.
The lender uses a foreign company name with no Philippine registration.

4. Check Whether the Company or App Has Been Flagged by Regulators

The SEC has issued warnings, advisories, suspension orders, revocations, and notices involving lending and financing companies, including online lending apps. A borrower should check whether the company, app, or its officers have been named in regulatory advisories.

A lender may have been legitimate before but later suspended or revoked. Likewise, some operators repeatedly change app names after being flagged. This means borrowers should check not only the company name but also:

App name;
Website name;
Trade name;
Facebook page name;
Developer name in the app store;
Corporate name;
Names of officers;
Collection agency name;
Customer service email or number.

If the company appears in a warning list, blacklist, advisory, or enforcement action, avoid borrowing from it until its status is clarified.

5. Verify the App Developer and Platform Details

Many online loans are offered through mobile apps. The app store page can reveal useful information.

Check the following:

App Detail	What to Look For
Developer name	Should match or be linked to the registered lending company
Contact email	Should use a professional domain, not only a free email account
Privacy policy	Should be readable, specific, and identify the company
Address	Should provide a real business address
Permissions requested	Should be reasonable and not excessive
Reviews	Watch for complaints about harassment, hidden fees, or contact-shaming
App history	Frequent name changes may be suspicious

Be especially careful with apps that request access to contacts, photos, camera, microphone, location, SMS, or social media accounts without a clear lawful purpose. Excessive data access is a major red flag.

6. Review the Loan Terms Before Accepting

A legitimate lender must clearly disclose the loan terms before the borrower accepts the loan. The borrower should be able to understand how much will be received, how much must be repaid, when payment is due, and what charges apply.

The loan agreement should clearly state:

Principal amount;
Net proceeds;
Interest rate;
Processing fees;
Service fees;
Documentary charges, if any;
Late payment charges;
Penalties;
Total repayment amount;
Due date;
Installment schedule, if applicable;
Method of payment;
Consequences of default;
Collection process;
Borrower’s rights;
Lender’s legal name and contact details.

A common abusive practice is advertising “low interest” while deducting large processing fees upfront. For example, an app may advertise a ₱5,000 loan but release only ₱3,500, then require repayment of ₱5,000 or more within seven days. Borrowers should calculate the real cost of borrowing, not merely rely on the stated interest rate.

A legitimate lender should not hide the effective charges.

7. Watch for Unfair, Excessive, or Hidden Charges

Philippine law and regulations generally require transparency and fair dealing. An online lender should not mislead borrowers about the cost of credit.

Red flags include:

Interest rate is not disclosed before loan approval.
Fees are deducted without prior consent.
The app shows one amount but releases a smaller amount.
Charges appear only after approval.
The loan term is extremely short, such as seven days, with very high fees.
The lender imposes daily penalties that quickly exceed the loan amount.
The lender automatically renews or rolls over the loan with new fees.
The borrower cannot access a copy of the loan contract.
The lender refuses to issue receipts or payment confirmations.
The lender changes the amount due without explanation.

Borrowers should take screenshots of all loan terms before clicking “accept” or “confirm.” Screenshots may be useful in case of complaints.

8. Check Compliance with the Truth in Lending Rules

The Truth in Lending Act requires lenders to disclose the true cost of credit. Borrowers should be informed of finance charges and the effective cost of borrowing.

A legitimate lender should not bury important charges in vague terms. It should disclose the cost of the loan in a way that allows borrowers to compare offers.

Borrowers should look for disclosures such as:

Amount financed;
Finance charges;
Interest rate;
Effective interest rate;
Total amount payable;
Payment schedule;
Default charges.

If a lender refuses to provide a full breakdown, that is a serious warning sign.

9. Examine the Privacy Policy

Online lending companies collect personal information. This may include name, address, employment details, phone number, government IDs, bank details, e-wallet details, and sometimes device data. Because of this, online lenders must comply with the Data Privacy Act of 2012.

A legitimate lender should have a privacy policy that explains:

What personal data is collected;
Why the data is collected;
How the data will be used;
Whether data will be shared with third parties;
How long data will be retained;
How borrowers can exercise their data privacy rights;
How borrowers can contact the company’s data protection officer or responsible privacy contact;
Security measures for personal information.

A vague privacy policy is a red flag. A privacy policy that gives the lender unlimited access to contacts, photos, social media accounts, or personal files is also suspicious.

10. Be Careful with Contact List Access

One of the most notorious abusive practices of illegal or abusive online lenders is contact-shaming. This happens when the lender accesses the borrower’s phone contacts and sends messages to family, friends, coworkers, or employers to shame the borrower into paying.

This practice may violate data privacy rights, collection rules, and other laws depending on the facts.

A borrower should be cautious if an app requests permission to access:

Contacts;
Photos;
Videos;
SMS messages;
Call logs;
Location;
Social media accounts;
Files;
Camera and microphone.

Some information may be needed for identity verification, but the lender should not collect more data than necessary. A legitimate lender should not threaten to message all contacts or post the borrower’s information online.

11. Identify Illegal Collection Practices

Debt collection is allowed, but abusive collection is not. A lender may demand payment, send reminders, and pursue lawful remedies. However, it must not use harassment, threats, defamation, intimidation, or public shaming.

Unlawful or abusive collection practices may include:

Threatening the borrower with imprisonment for nonpayment of an ordinary debt;
Using obscene, insulting, or humiliating language;
Contacting the borrower’s relatives, friends, employer, or coworkers to shame the borrower;
Posting the borrower’s photo or personal information online;
Creating fake police, court, or barangay documents;
Pretending to be a lawyer, police officer, prosecutor, or court sheriff;
Threatening physical harm;
Threatening to file criminal cases that have no basis;
Sending messages at unreasonable hours;
Repeatedly calling to harass;
Disclosing the debt to third parties;
Using the borrower’s contact list without valid authority;
Making false statements about arrest warrants, subpoenas, or hold-departure orders;
Threatening to ruin the borrower’s reputation.

A legitimate lender should have professional collection policies. Even when the borrower is in default, the borrower does not lose basic rights to dignity, privacy, and due process.

12. Know That Nonpayment of Debt Is Generally Not a Crime by Itself

In the Philippines, failure to pay a debt is generally a civil matter, not automatically a criminal offense. A borrower may be sued for collection of sum of money, but mere inability to pay does not usually result in imprisonment.

However, criminal liability may arise in specific situations, such as fraud, falsification, use of fake documents, or issuance of bouncing checks under applicable laws. Each case depends on the facts.

Illegal lenders often scare borrowers by saying:

“You will be arrested today.”
“Police are on the way.”
“You have a warrant.”
“You will be charged with syndicated estafa.”
“We will file a criminal case if you do not pay in one hour.”

These claims are often used as intimidation. A legitimate lender should not misrepresent the legal process.

13. Check Whether the Lender Has a Physical Office

A legitimate lending company should have a traceable office address. The address should match public records, the privacy policy, loan contract, website, app store listing, and customer service information.

Be careful if the lender provides:

No address;
Only a mobile number;
Only a Facebook page;
Only a Telegram or WhatsApp account;
An address that belongs to a coworking space with no proof of actual operation;
An address inconsistent with SEC records;
A foreign address without Philippine registration;
A fake or incomplete address.

A borrower should also check whether the company has a proper customer service channel. Legitimate lenders usually provide official email addresses, hotlines, or ticketing systems.

14. Be Wary of Social Media-Only Lenders

Some illegal lenders operate entirely through Facebook, Messenger, TikTok, Viber, Telegram, WhatsApp, or text messages. They may ask borrowers to send IDs, selfies, payslips, ATM cards, SIM cards, or online banking credentials.

A social media page does not prove legitimacy. Many scammers use stolen business names, fake testimonials, and edited certificates.

Red flags include:

“No requirements, instant approval” claims;
Asking for an advance fee before release;
Asking for the borrower’s online banking password;
Asking for OTP codes;
Asking the borrower to surrender an ATM card;
Asking for nude photos or compromising images as “security”;
Asking for access to e-wallet accounts;
Refusing to provide a written contract;
Using personal bank accounts for payments;
Offering loans through private messages only.

A legitimate lender should not ask for passwords, OTPs, or control over the borrower’s bank or e-wallet account.

15. Beware of Advance Fee Loan Scams

An advance fee loan scam happens when a supposed lender asks the borrower to pay money before the loan is released. The payment may be called:

Processing fee;
Insurance fee;
Activation fee;
Verification fee;
Attorney’s fee;
Notarial fee;
Release fee;
Collateral fee;
Tax clearance fee.

After payment, the scammer disappears or demands more fees.

A legitimate lender may charge fees, but these should be clearly disclosed and usually deducted from proceeds or included in the loan terms, not demanded through suspicious personal accounts before release. Borrowers should be extremely careful when asked to send money first, especially to an individual’s bank or e-wallet account.

16. Check the Payment Channels

A legitimate lender should provide official payment channels. Payments should be traceable and receipted.

Be careful if the lender requires payment to:

A personal GCash or Maya account;
A personal bank account unrelated to the company;
Cryptocurrency wallets;
Unregistered remittance accounts;
Different names every payment cycle;
Agents who cannot issue receipts.

Borrowers should keep proof of payment, including screenshots, reference numbers, receipts, emails, and SMS confirmations.

If the account name does not match the lending company, the borrower should ask for clarification before paying.

17. Read the Loan Agreement Carefully

A legitimate online lender should provide access to the loan agreement before or upon loan approval. The borrower should be able to save or download a copy.

Important clauses to review include:

Interest and Fees

The contract should clearly explain the interest rate, fees, and penalties. Avoid contracts that allow the lender to impose unspecified charges at its sole discretion.

Repayment Terms

The due date and repayment schedule should be clear. If the loan is installment-based, each installment should be stated.

Default

The agreement should explain what happens if the borrower fails to pay. It should not include illegal threats or abusive remedies.

Data Privacy Consent

The borrower should check what data the lender collects and whether the borrower is supposedly authorizing access to contacts, photos, or other personal data.

Collection Practices

The contract may authorize collection agencies, but this does not allow harassment, threats, or public shaming.

Assignment of Debt

Some lenders may transfer or assign accounts to third-party collectors. The borrower should know who may contact them.

Governing Law and Venue

The agreement should be governed by Philippine law if the lender operates in the Philippines. Watch out for vague foreign-law provisions that make enforcement confusing.

18. Check the Interest Rate and Effective Cost

Borrowers should calculate the total repayment cost.

For example:

Loan amount advertised: ₱10,000
Amount actually received: ₱8,000
Repayment after 14 days: ₱10,500

The lender may claim the interest is only ₱500, but the borrower actually paid ₱2,500 for receiving ₱8,000 for 14 days. That is a much higher effective cost.

Borrowers should ask:

How much cash will I actually receive?
How much must I pay in total?
How many days or months do I have to pay?
What happens if I am late?
Are there daily penalties?
Are there rollover fees?
Are there collection charges?
Is there an option to prepay?
Will prepayment reduce interest?

If the lender cannot answer clearly, do not proceed.

19. Check for Automatic Loan Disbursement

Some borrowers complain that certain apps disburse loans even when the borrower did not clearly accept the final terms. This is dangerous because the borrower may suddenly become obligated to pay charges they did not knowingly agree to.

Before using an online lending app, check whether the app:

Releases funds automatically after registration;
Treats clicking “check eligibility” as loan acceptance;
Sends money without showing final charges;
Does not allow cancellation;
Makes it hard to contact customer service.

A legitimate lender should obtain clear consent before releasing a loan.

20. Check for Fake Documents and Misrepresentation

Illegal lenders may show fake SEC certificates, fake permits, or edited screenshots. Borrowers should not rely only on documents sent by the lender.

Common tricks include:

Sending a certificate belonging to another company;
Using an expired or revoked authority;
Showing a DTI registration instead of SEC authority;
Using a mayor’s permit as proof of lending authority;
Displaying a certificate that does not match the app name;
Altering the company name on a certificate;
Using a legitimate company’s details without permission.

Always verify details independently. The name, registration number, address, and authority should match.

21. Distinguish Lending Companies from Financing Companies

A lending company generally grants loans from its own capital funds or from authorized sources. A financing company may extend credit facilities, financing, leasing, factoring, or similar services. Both may fall under SEC regulation, depending on their structure and activities.

For borrowers, the practical point is this: whether the entity calls itself a lending company, financing company, credit provider, cash loan app, salary loan provider, or loan marketplace, it should have the proper legal authority for what it actually does.

A company cannot avoid regulation merely by changing labels.

22. Be Careful with Loan Marketplaces and Referral Apps

Some apps claim they are not lenders but merely “loan marketplaces,” “matching platforms,” or “referral partners.” These apps may collect borrower data and forward it to third-party lenders.

Borrowers should check:

Who is the actual lender?
Is the actual lender SEC-registered?
Who will receive the borrower’s personal data?
How many lending partners will receive the application?
Will the borrower be contacted by multiple lenders?
Is consent freely given and specific?
Can the borrower withdraw consent?
Who is responsible for complaints?

A loan marketplace may still have legal responsibilities, especially if it collects personal information or participates in loan processing.

23. Check the Company’s Complaints History

A borrower should search for patterns of complaints. A few negative reviews may not prove illegality, but repeated complaints about the same abusive practices are warning signs.

Look for complaints involving:

Harassment;
Contact-shaming;
Unauthorized access to contacts;
Hidden charges;
Excessive interest;
Threats of arrest;
Fake legal documents;
Unauthorized loan disbursement;
Refusal to issue receipts;
Continued collection after payment;
Identity theft;
Repeated calls to employers;
Data privacy violations.

Reviews should be read carefully. Some may be fake, but repeated detailed complaints across platforms should not be ignored.

24. Check Whether the Lender Uses Lawful Advertising

Legitimate lenders should not mislead the public. Be careful with advertisements that say:

“Guaranteed approval”;
“No rejection”;
“No documents needed”;
“No credit check ever”;
“0% interest” but with large hidden fees;
“SEC approved” without proof;
“Government accredited” without basis;
“No payment, no problem”;
“Borrow using only your phone number”;
“Instant ₱50,000 loan for everyone.”

Advertising should be fair, truthful, and consistent with the actual loan terms.

25. Confirm That the Lender Does Not Require Illegal Collateral

Some informal lenders demand unlawful or abusive forms of security. Be careful if the lender asks for:

ATM card and PIN;
Online banking username and password;
E-wallet login details;
SIM card;
Social media account access;
Blank checks without proper documentation;
Passport or government ID to be held indefinitely;
Personal compromising photos;
Employer login credentials;
Salary account control.

No legitimate lender should ask for OTPs, passwords, or control of the borrower’s accounts.

26. Check Data Privacy Red Flags

A legitimate online lender should respect data minimization. This means it should collect only what is necessary for a lawful purpose.

Red flags include:

App cannot be used unless contacts access is granted;
App demands access to gallery, camera, microphone, and location without clear reason;
Privacy policy says data may be shared with “any person” for “any purpose”;
Borrower’s contacts receive messages even before default;
Lender posts borrower details on social media;
Lender creates group chats to shame borrower;
Lender sends edited photos or defamatory messages;
Lender threatens to contact all phone contacts;
Lender refuses to delete data after the account is settled.

Borrowers have rights under the Data Privacy Act, including rights to be informed, to object, to access, to correct, and, in proper cases, to request blocking, removal, or destruction of personal data.

27. Know the Role of the National Privacy Commission

The National Privacy Commission, or NPC, handles data privacy concerns. If an online lender misuses personal data, accesses contacts without valid authority, discloses a borrower’s debt to third parties, or publicly shames the borrower, the borrower may consider filing a complaint with the NPC.

A borrower should preserve evidence such as:

Screenshots of app permissions;
Privacy policy;
Harassing messages;
Messages sent to contacts;
Call logs;
Social media posts;
Loan agreement;
Proof of payment;
Screenshots of threats;
Names and numbers used by collectors.

The stronger the documentation, the easier it is to explain the violation.

28. Know the Role of the SEC

The SEC regulates lending and financing companies. Complaints involving unregistered lending, abusive collection, lack of authority, and regulatory violations may be brought to the SEC.

A borrower may report:

Lending without SEC authority;
Use of unregistered online lending apps;
Harassment by lending or financing companies;
Misleading loan terms;
Failure to disclose charges;
Use of banned or abusive collection practices;
Suspicious or revoked entities continuing to operate.

Complaints should include complete details, documents, screenshots, phone numbers, app links, payment records, and names used by the lender.

29. Know the Possible Role of Other Agencies

Depending on the facts, other agencies may become relevant.

Bangko Sentral ng Pilipinas

The BSP regulates banks, e-money issuers, and certain financial institutions. If the issue involves a BSP-supervised entity, e-wallet, payment system, or bank-related concern, BSP channels may be relevant.

Department of Trade and Industry

The DTI may be relevant for consumer protection issues involving deceptive business practices, though lending companies are primarily under SEC regulation.

Philippine National Police or National Bureau of Investigation

If there is fraud, identity theft, cyber harassment, extortion, threats, or other criminal conduct, law enforcement may be involved.

Barangay or Courts

For ordinary debt collection disputes, civil remedies and barangay conciliation may apply depending on the parties and circumstances.

30. Check Whether the Lender Threatens Criminal Cases Improperly

A legitimate lender may inform a borrower of legal remedies, but it should not use fake criminal threats to force immediate payment.

Be cautious of messages claiming:

A warrant has already been issued without any court case;
Police will arrest the borrower within hours;
The borrower is automatically guilty of estafa;
A cybercrime case has already been filed without documents;
Barangay officials will seize property;
Immigration will issue a hold-departure order;
The borrower’s employer must terminate them;
The borrower’s family is legally required to pay.

Legal processes take time and require proper procedure. Fake urgency is a common intimidation tactic.

31. Know the Difference Between Legitimate Collection and Harassment

A lender may lawfully remind a borrower to pay. A collector may call, text, email, or send a demand letter. However, collection must remain professional and lawful.

Legitimate Collection May Include:

Payment reminders;
Statement of account;
Demand letter;
Notice of overdue balance;
Offer to restructure;
Referral to a collection agency;
Filing a civil case;
Lawful reporting, where permitted and properly disclosed.

Abusive Collection May Include:

Threats;
Insults;
Public shaming;
Contacting unrelated third parties;
Misrepresenting legal consequences;
Fake court or police documents;
Repeated calls meant to harass;
Disclosure of debt to employer;
Posting borrower details online;
Using personal data beyond lawful purpose.

The borrower’s default does not justify abuse.

32. Protect Yourself Before Applying

Before submitting an online loan application, a borrower should do the following:

Identify the legal company name.
Verify SEC registration.
Verify Certificate of Authority.
Check if the app or platform is listed or associated with that company.
Read the privacy policy.
Check app permissions.
Read the loan agreement.
Calculate the total repayment amount.
Search for complaints and regulatory advisories.
Avoid lenders that ask for advance fees, OTPs, passwords, or contact list access.
Take screenshots before agreeing.
Save copies of all terms and communications.

Borrowers should not rush. Scammers rely on urgency.

33. Protect Yourself After Borrowing

After taking a loan, the borrower should:

Save the loan agreement;
Save screenshots of the approved amount and repayment amount;
Keep all payment receipts;
Pay only through official channels;
Ask for written confirmation after payment;
Monitor whether the app changes the due amount;
Avoid giving new personal data unnecessarily;
Revoke unnecessary app permissions;
Document harassment immediately;
Report abusive conduct to the appropriate agency.

If the borrower cannot pay on time, it is better to communicate in writing and request restructuring or an extension. Written communication creates a record.

34. What to Do If You Already Borrowed from a Suspicious Online Lender

If a borrower has already borrowed from a questionable lender, the borrower should not ignore the situation. Instead:

Gather all records.
Identify the lender’s legal name.
Compute the actual amount received and paid.
Check whether the lender is SEC-registered and authorized.
Save screenshots of threats or harassment.
Pay only through traceable channels.
Avoid giving OTPs, passwords, or additional personal data.
Revoke unnecessary app permissions.
Notify contacts if the lender threatens contact-shaming.
Consider filing complaints with the SEC, NPC, or law enforcement depending on the conduct.

Borrowers should be careful about deleting the app too early if the app contains records of the loan. Before deleting, save screenshots and copies of relevant information.

35. What Evidence Should Be Preserved

Evidence is important for complaints. Borrowers should preserve:

App name and app store link;
Developer name;
Screenshots of app permissions;
Privacy policy;
Loan agreement;
Disclosure statement;
Amount applied for;
Amount released;
Repayment amount;
Due date;
Payment receipts;
Bank or e-wallet transaction records;
Screenshots of chats;
SMS messages;
Call logs;
Voice recordings, where legally obtained;
Emails;
Threats;
Messages sent to contacts;
Social media posts;
Names and numbers of collectors;
SEC documents shown by the lender;
Advertisements and promotional materials.

A timeline is also helpful. The borrower should list dates of application, approval, release, due date, payments, and harassment incidents.

36. How to Spot a Fake Online Lender Quickly

A borrower should be suspicious if several of the following are present:

No SEC registration;
No Certificate of Authority;
No physical office;
No written loan agreement;
No clear interest rate;
No clear total repayment amount;
Advance fee required;
Personal bank account used for payment;
App asks for contacts and photos;
Threats of public shaming;
Threats of arrest;
Very short loan term with huge fees;
App has many harassment complaints;
Company name does not match app name;
Fake or unverifiable documents;
Customer service uses only mobile numbers;
Lender refuses to issue receipts;
Lender demands OTPs or passwords.

One red flag may require caution. Multiple red flags usually mean the borrower should walk away.

37. Online Lending and Cybercrime Issues

Some abusive online lending practices may involve cyber-related offenses, depending on the facts. Examples may include identity theft, unlawful access, cyber libel, unjust vexation, grave threats, coercion, or other offenses. Not every abusive act automatically fits a specific crime, but borrowers should document the conduct and seek legal advice when threats, public shaming, or identity misuse occur.

A collector who edits a borrower’s photo, posts defamatory claims online, or sends humiliating messages to contacts may face legal consequences. The same may apply to persons who impersonate police officers, lawyers, court staff, or government officials.

38. Employer and Workplace Harassment

Some lenders contact employers or coworkers to pressure borrowers. This is highly problematic. A debt is generally a private matter between borrower and lender. Disclosing a borrower’s debt to an employer or coworkers may violate privacy rights and may be defamatory or abusive depending on the content.

If this happens, the borrower should:

Save screenshots or recordings;
Ask the recipient to preserve the message;
Identify the number or account used;
Inform HR that the matter is personal and that harassment is being documented;
Include the incident in complaints to regulators.

A legitimate lender should not use workplace humiliation as a collection strategy.

39. Family Members Are Generally Not Automatically Liable

Collectors often tell borrowers that their parents, spouse, siblings, children, friends, or contacts must pay the loan. As a general rule, a person is not liable for another person’s debt unless that person signed as a co-borrower, guarantor, surety, or otherwise legally assumed responsibility.

A lender may not simply force relatives or contacts to pay because their number appeared in the borrower’s phone.

There may be special rules involving spouses and conjugal or community property depending on the nature of the debt, but ordinary contacts, friends, coworkers, and relatives are not automatically liable.

40. Beware of Loan Restructuring Scams

Some collectors offer “discounts,” “settlement,” or “restructuring” through unofficial channels. Borrowers should be careful.

Before paying a settlement amount, ask for:

Written settlement offer;
Name of the company;
Account number;
Amount to be paid;
Confirmation that payment fully settles the obligation;
Official payment channel;
Receipt;
Written clearance after payment.

Do not rely only on verbal promises. Some borrowers pay a supposed discounted amount, only to be told later that penalties remain.

41. What a Legitimate Loan Settlement Should Look Like

A proper settlement should clearly state:

Borrower’s name;
Loan account number;
Original balance;
Settlement amount;
Payment deadline;
Payment method;
Effect of payment;
Confirmation that no further amount will be collected upon full settlement;
Authorized representative;
Company contact details.

After payment, the borrower should request a certificate of full payment or account closure.

42. What to Do If the Lender Keeps Collecting After Full Payment

If a lender continues collecting after full payment, the borrower should send proof of payment and request correction of records. If the lender continues harassment, the borrower may file complaints.

Evidence should include:

Payment receipts;
Confirmation messages;
Account statements;
Screenshots showing continued collection;
Names and numbers of collectors;
Dates and times of calls or messages.

A lender’s poor recordkeeping does not justify repeated harassment.

43. Borrower Responsibilities

Borrowers also have responsibilities. A borrower should:

Provide truthful information;
Read the terms before accepting;
Borrow only what can reasonably be repaid;
Pay on time if able;
Communicate in case of difficulty;
Keep records;
Avoid using fake IDs or false employment information;
Avoid borrowing from multiple apps to pay old loans;
Avoid sharing passwords or OTPs.

Checking legitimacy protects borrowers, but it does not erase valid obligations. If the loan is lawful and the amount is correct, the borrower remains responsible for repayment according to the agreement.

44. Legal Remedies of a Legitimate Lender

A legitimate lender may pursue lawful remedies if a borrower defaults. These may include:

Sending demand letters;
Offering restructuring;
Referring the account to a legitimate collection agency;
Filing a civil collection case;
Enforcing lawful security arrangements;
Reporting to credit bureaus, if legally permitted and properly disclosed.

However, lawful remedies do not include harassment, threats, public shaming, or misuse of personal data.

45. Practical Checklist Before Borrowing

Before accepting an online loan, answer these questions:

Question	Safe Answer
Is the company SEC-registered?	Yes, verified independently
Does it have a Certificate of Authority?	Yes
Does the app name match the registered company?	Yes, or the link is clearly disclosed
Is there a physical office?	Yes
Are loan terms clear?	Yes
Is the total repayment amount disclosed?	Yes
Are fees reasonable and explained?	Yes
Can you download the contract?	Yes
Does the app avoid excessive permissions?	Yes
Is there a clear privacy policy?	Yes
Are payment channels official?	Yes
Are reviews free from serious harassment patterns?	Mostly yes
Has the company avoided SEC/NPC warnings?	Yes
Does it avoid advance fees and OTP requests?	Yes

If the answer to several of these is “no,” avoid the lender.

46. Common Myths About Online Lending in the Philippines

Myth 1: “If the app is in the app store, it must be legal.”

Not necessarily. App availability does not prove SEC authority or legal compliance.

Myth 2: “If the company has a mayor’s permit, it can lend money.”

Not necessarily. Lending companies generally need SEC registration and authority.

Myth 3: “If I do not pay, I will automatically be arrested.”

Nonpayment of an ordinary debt is generally a civil issue. Arrest requires a proper criminal basis and legal process.

Myth 4: “The lender can message all my contacts because I gave app permission.”

Consent must be lawful, specific, informed, and limited to legitimate purposes. Harassment and public shaming are not justified simply by app permissions.

Myth 5: “A screenshot of an SEC certificate is enough.”

No. The details must be independently verified, current, and connected to the actual lender or app.

Myth 6: “All online lenders are scams.”

No. Some are legitimate and regulated. The key is verification.

47. Special Warning on “Too Fast” Loans

Speed is attractive, but extremely fast loans can be dangerous when paired with hidden charges and aggressive collection. Borrowers should be extra cautious when approval happens within minutes without meaningful review, especially if the app demands broad access to personal data.

Legitimate lenders may use automated systems, but they should still disclose terms clearly and protect borrower data.

48. Red Flags in Collection Messages

The following messages are warning signs:

“We will post your face online.”
“We will text all your contacts.”
“You are a scammer and criminal.”
“Police will arrest you today.”
“We have a warrant.”
“Your employer will receive your case file.”
“Your family must pay for you.”
“Send payment in one hour or we will expose you.”
“We will edit your photo and spread it.”
“We are from the court/police” without proof.

Such messages should be saved and reported.

49. Data Security Steps for Borrowers

Borrowers who installed a suspicious lending app should consider:

Revoking app permissions;
Changing passwords;
Enabling two-factor authentication;
Monitoring e-wallet and bank activity;
Checking whether contacts were accessed;
Saving evidence before uninstalling;
Reporting the app to the platform;
Reporting privacy violations to the NPC;
Reporting unregistered lending to the SEC;
Blocking abusive numbers after preserving evidence.

Do not give OTPs to anyone. An OTP is effectively a key to an account or transaction.

50. Final Legal Takeaways

An online lending company in the Philippines is more likely to be legitimate if it is registered with the SEC, has a valid Certificate of Authority, clearly discloses loan terms, respects data privacy, uses lawful collection methods, and operates through official and traceable channels.

The most important checks are:

Verify the legal entity.
Verify SEC registration.
Verify the Certificate of Authority.
Confirm that the app or website belongs to that authorized entity.
Read the loan terms before accepting.
Calculate the true cost of the loan.
Review the privacy policy and app permissions.
Avoid advance fees, OTP requests, and password demands.
Watch for harassment complaints.
Preserve evidence and report violations.

A legitimate lender does not need to hide its identity, mislead borrowers, demand passwords, access unrelated personal data, or threaten public humiliation. In online lending, transparency, authorization, and lawful conduct are the strongest signs of legitimacy.