In the Philippine digital landscape of 2026, the proliferation of Online Lending Apps (OLAs) has led to a surge in predatory practices. While the Securities and Exchange Commission (SEC) has modernized its regulatory framework, many "fly-by-night" apps operate without a Certificate of Authority (CA). These unregistered entities often resort to "debt-shaming," threats, and privacy violations to coerce payment.
This guide outlines the legal remedies and procedural steps for victims of harassment by unregistered OLAs under current Philippine laws.
1. The Legal Framework
Harassment by lending apps is not just unethical; it is a violation of multiple statutes and administrative orders.
- RA 11765 (Financial Products and Services Consumer Protection Act): Provides the SEC and the Bangko Sentral ng Pilipinas (BSP) expanded powers to protect consumers from unfair collection practices and ensures the right to data privacy.
- SEC Memorandum Circular No. 18, Series of 2019: Explicitly prohibits "Unfair Debt Collection Practices."
- RA 10173 (Data Privacy Act of 2012): Penalizes the unauthorized processing and malicious disclosure of personal information (e.g., contacting your phone’s contact list).
- RA 10175 (Cybercrime Prevention Act of 2012): Covers online libel, identity theft, and cyber-harassment.
- RA 9474 (Lending Company Regulation Act): Requires all lending companies to be registered as corporations and obtain a CA from the SEC. Operating without this is a criminal offense.
2. Defining Prohibited Harassment
Under SEC MC 18 and NPC (National Privacy Commission) guidelines, the following actions constitute illegal harassment:
| Prohibited Act | Description |
|---|---|
| Contact List Access | Messaging or calling people in your phone’s contact list who are not your co-makers or guarantors. |
| Public Shaming | Posting your photo or debt details on social media (Facebook/TikTok) or creating "wanted" posters. |
| Threats of Violence | Using profane language or threatening physical harm to the borrower or their family. |
| False Representation | Claiming to be a lawyer, police officer, or NBI agent. Falsely claiming a criminal case (Estafa) has been filed. |
| Unreasonable Hours | Calling before 6:00 AM or after 10:00 PM (unless the debt is over 60 days past due). |
3. How to Verify Registration
Before filing a complaint, check if the app is registered. Unregistered apps are "illegal lenders" and are subject to immediate Cease and Desist Orders (CDO).
- SEC Check App: Use the official SEC mobile application to verify the corporation's status.
- SEC Website: Cross-reference the app name with the List of Lending Companies with Certificate of Authority on the SEC official website.
- Note on Names: Often, the app name (e.g., "FastCash") differs from the registered corporate name (e.g., "XYZ Lending Corp"). Check the "About" or "Terms" section of the app.
4. Step-by-Step Complaint Procedure
Step A: Evidence Gathering
Do not delete the messages. You need a paper trail to build a case.
- Screenshots: Capture threatening texts, social media posts, and the app’s interface.
- Call Logs: Record the frequency and duration of calls.
- Contact Proof: Obtain screenshots from friends or family members who were contacted by the OLA.
- Loan Details: Save the loan contract, disclosure statement, and proof of any payments made.
Step B: Filing with the SEC
The SEC’s Financing and Lending Companies Division (FLCD) handles administrative complaints.
- Portal: Visit imessage.sec.gov.ph.
- Process: Submit a formal letter of complaint including your full name, the app's name, and a chronological narration of the harassment.
- Outcome: The SEC can revoke the licenses of registered apps or coordinate with law enforcement to shut down unregistered ones.
Step C: Filing with the National Privacy Commission (NPC)
If the OLA accessed your contacts or leaked your data, file a Privacy Violation Complaint.
- Email: Send your complaint to
complaints@privacy.gov.ph. - Requirement: Use the NPC’s official Complaint Form. You must show that you attempted to contact the OLA's Data Protection Officer (DPO) first, unless the threat is imminent.
Step D: Filing with Law Enforcement (PNP-ACG / NBI)
For criminal harassment, death threats, or identity theft:
- PNP Anti-Cybercrime Group (ACG): Visit their headquarters at Camp Crame or report via
acg@pnp.gov.ph. - NBI Cybercrime Division: File a report at the NBI Building in Manila or their regional offices.
- Cyber-Hotline: Dial
1326(the DICT’s inter-agency emergency hotline).
5. Administrative Sanctions and Penalties
Under current 2026 enforcement standards, the SEC imposes the following for unfair collection:
- First Offense: ₱25,000 to ₱50,000 fine.
- Second Offense: ₱50,000 to ₱100,000 fine and/or suspension of lending activities.
- Third Offense: Up to ₱1,000,000 fine and Revocation of Certificate of Authority.
For unregistered apps, the penalties are criminal. Operating an unregistered lending business can lead to imprisonment of up to two years and fines of up to ₱50,000 under RA 9474, plus separate penalties for Cyber-Libel or Data Privacy violations.
6. Actionable Checklist for Victims
- [ ] Change Privacy Settings: Set your social media profiles to private.
- [ ] Alert Contacts: Inform your contact list that you are being targeted by a scam app and advise them not to engage with any messages.
- [ ] Do Not Pay for "Extortion": If an app is unregistered and using illegal tactics, paying often leads to "re-borrowing" scams where they deduct 40% as fees immediately.
- [ ] Report to App Stores: Report the app on Google Play Store or Apple App Store for "Harassment" and "Financial Scams" to help get the app delisted.