If an online lending app is threatening you, shaming you to your contacts, adding unexplained charges, or ignoring your requests for a proper statement of account, you can escalate the complaint to the Philippine Securities and Exchange Commission (SEC). The key is to file it as a clear, evidence-backed regulatory complaint against the company behind the app, not just as a general rant against “OLA harassment.” The SEC regulates lending companies, financing companies, and their online lending platforms, and it now uses its iMessage ticketing system for public complaints and requests. (Securities and Exchange Commission)
What the SEC Can Do About an Online Lending App Complaint
The SEC is not just a business registration office. For lending apps, it is the main regulator for:
- Lending companies under Republic Act No. 9474, or the Lending Company Regulation Act of 2007
- Financing companies under Republic Act No. 8556, or the Financing Company Act of 1998
- Online lending platforms used by those companies
- Unfair debt collection practices by registered lending or financing companies and their agents
Under RA 9474, a lending company must be a corporation and cannot conduct business unless it has authority to operate from the SEC. The same law gives the SEC power to regulate, require reports, exercise visitorial powers, and impose sanctions such as suspension or revocation of authority and fines. (Supreme Court E-Library)
This matters because many borrowers only know the app name, such as the name appearing on Google Play, the App Store, Facebook ads, SMS, or GCash instructions. But the SEC complaint should identify, as much as possible, the legal entity behind the app: the corporation, its SEC registration number, Certificate of Authority, office address, customer service email, collection agency, or payment account.
Legal Basis: What Online Lending Apps Are Not Allowed to Do
The most important SEC rule for harassment complaints is SEC Memorandum Circular No. 18, Series of 2019, titled Prohibition on Unfair Debt Collection Practices of Financing Companies and Lending Companies. It applies to financing companies, lending companies, and third-party service providers they hire for collection.
Under this circular, lenders may use reasonable and lawful ways to collect a debt, but they must act in good faith and refrain from unscrupulous or untoward acts. The following are examples of prohibited unfair collection practices:
- Threatening violence or other criminal means against a person, reputation, or property
- Threatening legal action that cannot legally be taken
- Using obscenities, insults, or profane language that tends to abuse the borrower
- Publishing or disclosing names and personal information of borrowers who allegedly refuse to pay
- Telling third persons false information, including falsely saying a debt is disputed or falsely implying that the third person is liable
- Using false representation or deceptive means to collect a debt or obtain borrower information
- Contacting the borrower at unreasonable times, generally before 6:00 a.m. or after 10:00 p.m., subject to the specific exceptions in the circular
- Contacting persons in the borrower’s contact list other than those named as guarantors or co-makers
The circular also makes clear that outsourcing collection does not excuse the lending or financing company. A third-party service provider is treated as the company’s agent, and the ultimate responsibility for collection practices remains with the financing or lending company.
Penalties for Unfair Debt Collection
For violations of SEC MC No. 18, the penalties may include:
| Violation level | Lending company | Financing company |
|---|---|---|
| First offense | ₱25,000 | ₱50,000 |
| Second offense | ₱50,000 | ₱100,000 |
| Third offense | Fine of at least twice the second-offense fine but not more than ₱1,000,000, and/or 60-day suspension, and/or revocation of Certificate of Authority |
The SEC may also consider other penalties under the Revised Corporation Code and other applicable laws, and the courts or other government agencies may impose separate penalties within their own jurisdiction.
When a Complaint Should Be Escalated to the SEC
You should consider escalating to the SEC when the issue involves a lending or financing company, an online lending app, or an app that claims to offer loans in the Philippines, especially if any of these happened:
- The app or collector threatened you with arrest, barangay blotter, cybercrime charges, public posting, or home visits in a misleading or abusive way.
- The collector messaged your relatives, employer, co-workers, Facebook friends, or phone contacts.
- The collector sent screenshots of your ID, selfie, loan details, or private information to other people.
- The app imposed charges that do not match the disclosure statement or loan agreement.
- The app appears unregistered, unrecorded, fake, or pretending to be a legitimate company.
- The lender refuses to provide a statement of account, payment breakdown, or proper customer service channel.
- You already complained to the app’s customer support but harassment continued.
A complaint to the SEC does not automatically erase a valid loan. If you borrowed money and received the proceeds, the issue of repayment is separate from the issue of illegal collection, excessive charges, privacy violations, or unlicensed lending. The SEC complaint is mainly used to trigger regulatory action, investigation, sanctions, or instructions to the company.
Check First: Is the App Registered, Recorded, or Possibly Fake?
Before filing, try to classify the app. This helps the SEC understand what action may be needed.
| What you find | What it may mean | How to describe it in your complaint |
|---|---|---|
| Company is in SEC records and has a Certificate of Authority | It may be a regulated lending or financing company | “Respondent appears to be a registered lending/financing company, but its collectors committed unfair collection practices.” |
| Company is registered, but app name is not in the recorded online lending platform list | The app may be unrecorded or unauthorized | “The app appears connected to a company, but I could not verify that this specific online lending platform is recorded.” |
| App uses the name/logo of a known company but different payment accounts or numbers | Possible impersonation or fake app | “The app may be misusing the name of a registered company.” |
| No company name, no SEC number, no address, only Telegram/Viber/SMS/GCash | Possible illegal or unregistered operator | “The app appears to be operating without transparent company information.” |
The SEC maintains public resources for checking lending companies, financing companies, and recorded online lending platforms, and its iMessage page also links to “Check with SEC.” (www.foi.gov.ph)
Step-by-Step Guide to Escalating an Online Lending App Complaint to the SEC
1. Preserve evidence before blocking, deleting, or uninstalling anything
Do not rely on memory. SEC reviewers need proof that shows who did what, when, and how.
Save:
- Screenshots of threatening messages, including the sender’s number, username, email address, or profile
- Screenshots showing date and time
- Call logs, SMS logs, Viber/Telegram/Messenger messages, and emails
- Screenshots of messages sent to your contacts
- Statements from relatives, friends, co-workers, or employers who were contacted
- Loan agreement, disclosure statement, repayment schedule, and statement of account
- Proof of loan proceeds received
- Proof of payments already made
- App page screenshots showing app name, developer name, permissions, privacy policy, and customer support details
- Payment instructions showing GCash, Maya, bank account, or QR code details
- SEC verification screenshots, if available
A common mistake is uninstalling the app immediately. If you need to protect your data, take screenshots first. Then review app permissions, revoke unnecessary permissions, and preserve the device if the case may become a cybercrime or privacy complaint.
2. Identify the respondent correctly
In your complaint, list all names connected to the app:
- App name
- Developer name shown in the app store
- Corporate name, if shown
- SEC registration number, if shown
- Certificate of Authority number, if shown
- Website or Facebook page
- Customer service email
- Collection agency or collector name
- Phone numbers and messaging accounts used
- Payment account names and numbers
If you do not know the company behind the app, say so directly. For example:
“The app does not disclose a clear corporate name, SEC registration number, office address, or Certificate of Authority. I am requesting SEC assistance to verify whether this app is authorized to operate as an online lending platform.”
3. Prepare a short timeline
A good complaint is usually chronological. Keep it factual.
Example:
| Date | What happened | Evidence |
|---|---|---|
| 5 March 2026 | I borrowed ₱5,000 through the app and received ₱3,850 after deductions. | Loan screenshot, GCash receipt |
| 12 March 2026 | Collector texted threats that they would message my employer. | SMS screenshot |
| 13 March 2026 | My sister and co-worker received messages saying I was a scammer. | Screenshots from sister and co-worker |
| 14 March 2026 | I emailed customer support asking them to stop contacting third parties. No reply. | Email screenshot |
| 15 March 2026 | Collector demanded payment to a different GCash number. | SMS and GCash details |
This format helps the SEC see the pattern quickly.
4. File through SEC iMessage
The SEC’s iMessage system is its official web-based platform for handling public inquiries, complaints, incidents, and requests. The user guide says it generates a unique electronic ticket, allows users to track status, and centralizes communications that used to be handled through more informal channels. (Securities and Exchange Commission)
To file:
- Go to SEC iMessage.
- Choose Open a New Ticket.
- Agree to the privacy policy.
- Sign in using an eSECURE account.
- In the Service field, choose the service related to the Financing and Lending Companies Department.
- Select Complaints on Financing and Lending Companies.
- Fill out the form.
- Upload your evidence files.
- Submit and save the ticket number. (Securities and Exchange Commission)
The SEC iMessage service list identifies Complaints on Financing and Lending Companies under the Financing and Lending Companies Department’s Legal and Enforcement Division. (Securities and Exchange Commission)
5. Write the complaint in a way the SEC can act on
Use a direct subject line:
Complaint Against [App Name] / [Company Name] for Unfair Debt Collection, Harassment, Possible Unrecorded OLP, and Excessive Charges
In the body, include:
- Your full name and contact details
- App name and company name, if known
- Loan date, amount borrowed, amount received, and due date
- Summary of the abusive collection acts
- Names or numbers of collectors
- Names of third persons contacted
- Whether you already paid anything
- Whether you asked customer support to stop the harassment
- Specific request for SEC action
Possible wording:
I respectfully request the SEC to investigate the respondent company and/or online lending platform for possible violations of SEC Memorandum Circular No. 18, Series of 2019, including threats, abusive language, disclosure of my personal information, and contacting persons in my phone contacts who are not guarantors or co-makers. I also request verification of whether the app is a recorded online lending platform and whether the company has authority to operate as a lending or financing company.
6. Attach organized files
Use clear file names. SEC staff should not have to open 50 random screenshots to understand the case.
Examples:
01_Loan_Agreement_AppName.pdf02_Proof_of_Proceeds_GCash_March5.png03_Threats_From_Collector_0917xxxxxxx.pdf04_Message_To_Employer.png05_Request_To_Stop_Harassment_Email.pdf06_SEC_Verification_Screenshot.png
If you have many screenshots, combine them into one PDF and add page numbers. Put the most serious evidence first: threats, public shaming, messages to employer, messages to family, and proof that the contacted persons were not guarantors or co-makers.
7. Track the ticket and reply promptly
After filing, monitor the ticket. The iMessage user guide explains that users can view tickets, check status, open the ticket conversation thread, post replies, and upload files if needed. (Securities and Exchange Commission)
If harassment continues after filing, do not create multiple duplicate tickets unless necessary. Use the existing ticket and post a reply such as:
Additional harassment occurred after my SEC complaint was filed. Attached are new screenshots dated [date]. The collector again contacted my employer and threatened public posting.
This shows continuing conduct and may help establish urgency.
What to Attach: Required Documents and Evidence Checklist
| Document or evidence | Why it helps |
|---|---|
| Government ID | Confirms complainant identity if requested |
| Loan agreement or disclosure statement | Shows loan amount, charges, due date, and stated lender |
| Screenshots of app profile and app permissions | Helps identify the online lending platform and possible privacy issues |
| Screenshots of threats or insults | Supports unfair collection complaint |
| Messages sent to contacts, employer, or relatives | Shows third-party disclosure or harassment |
| Proof contacts were not guarantors or co-makers | Important under SEC MC No. 18 |
| Proof of payment | Prevents false claims that no payment was made |
| Statement of account or demand letters | Shows charges and collection basis |
| SEC verification screenshots | Helps show whether app/company is registered or unrecorded |
| Customer support emails | Shows you tried to resolve the matter directly |
What If the Main Issue Is Excessive Interest or Hidden Fees?
High interest, by itself, is not always the same as harassment. But for certain small, short-term, unsecured general-purpose loans, there are regulatory caps.
SEC Memorandum Circular No. 3, Series of 2022 implemented BSP Circular No. 1133 for covered loans offered by lending companies, financing companies, and their online lending platforms. It applies to unsecured general-purpose loans not exceeding ₱10,000 with a loan tenor of up to four months, entered into, restructured, or renewed beginning 3 March 2022.
For covered loans, the caps include:
| Charge | Ceiling |
|---|---|
| Nominal interest | 6% per month |
| Effective interest rate, including applicable fees and charges but excluding late-payment penalties | 15% per month |
| Late-payment or non-payment penalty | 5% per month on outstanding scheduled amount due |
| Total cost cap | 100% of total amount borrowed |
If your complaint is about excessive charges, attach the loan computation and explain the numbers. For example:
I borrowed ₱5,000, received ₱3,500 after deductions, and was asked to pay ₱7,500 after seven days. I request SEC review of whether the charges comply with the applicable ceilings for covered loans.
When to File With Other Agencies Too
Some online lending app cases involve more than one legal issue. The SEC handles the lending or financing company regulation side, but privacy and cybercrime issues may require parallel complaints.
| Problem | Possible agency |
|---|---|
| Lending company harassment, unfair collection, unrecorded OLP, lack of authority to operate | SEC |
| Harvesting contacts, misuse of phonebook, unauthorized disclosure of personal data | National Privacy Commission |
| Threats, cyberlibel, identity misuse, hacking, fake accounts, online extortion | PNP Anti-Cybercrime Group or NBI Cybercrime Division |
| Credit report dispute or improper credit data | Credit Information Corporation dispute process |
The Credit Information Corporation’s consumer guidance specifically points consumers to the SEC for lending and financing companies, online lending apps, and microfinance institutions, and points data privacy concerns to the NPC, PNP Anti-Cybercrime Group, NBI Cybercrime Division, and DOJ Office of Cybercrime. (Credit Information Corporation (CIC))
Filing With the National Privacy Commission
If the app accessed or used your contacts, photos, employer details, ID, or private information to shame or pressure you, the issue may fall under the Data Privacy Act of 2012 and NPC rules.
The NPC has stated that online lenders are prohibited from harvesting phone and social media contact lists for harassment, and that unnecessary permissions include accessing phone contact lists, harvesting social media contacts, and saving these for debt collection or harassment. (National Privacy Commission)
A formal NPC complaint must be filed in a specific format. The NPC’s complaint page says to download the form, print and fill it out, have it notarized, and submit it in person, by courier, or by scanned email to the NPC complaints address. (National Privacy Commission)
Filing a Cybercrime or Criminal Complaint
If the collector threatens physical harm, posts defamatory accusations online, uses your identity, or demands money through intimidation, consider a report to cybercrime authorities.
Under the Revised Penal Code, threats may fall under provisions such as Article 282 on grave threats, while coercive or vexatious conduct may implicate Article 287 on light coercions or unjust vexations, depending on the facts. Libel is defined under Article 353, and libel by writings or similar means is punished under Article 355. (Lawphil)
Under Republic Act No. 10175, or the Cybercrime Prevention Act of 2012, cyberlibel covers libel committed through a computer system or similar means, and crimes under the Revised Penal Code or special laws committed through information and communications technologies may be covered by the Act. The law also designates the NBI and PNP as law enforcement authorities for cybercrime cases. (Supreme Court E-Library)
Practical Timelines and What to Expect
| Stage | Practical timeline | What usually happens |
|---|---|---|
| SEC iMessage ticket creation | Same day | You receive a ticket and can monitor status |
| Initial routing | A few days to a few weeks | Ticket is assigned to the appropriate SEC department or unit |
| Clarification or document request | Varies | SEC may ask for clearer evidence, company details, or more documents |
| Company response or regulatory review | Weeks to months | More complex if the app hides its operator or uses fake names |
| Enforcement action | Case-dependent | May include warning, penalty, suspension, revocation, advisory, or referral |
Bottlenecks commonly happen when the borrower cannot identify the company, only has screenshots without dates, paid through personal e-wallet accounts, or deleted the messages. Cases involving fake apps, foreign operators, or rotating SIM cards may take longer because the SEC may need coordination with platforms, payment channels, or law enforcement.
Common Mistakes That Weaken SEC Complaints
1. Filing only against the app name
The app name is useful, but the SEC regulates legal entities. Always try to identify the corporation behind the app.
2. Sending only emotional statements without evidence
It is understandable to be angry or scared, but a complaint is stronger when it shows dates, screenshots, numbers, names, and exact messages.
3. Deleting messages after being threatened
Keep the evidence. If you need to block the collector, screenshot first.
4. Ignoring the distinction between debt and harassment
The SEC may investigate harassment even if you still owe money. But it helps to be honest about the loan, amount received, and payments made.
5. Paying random personal accounts without documenting
If you pay, save the payment instruction, account name, number, receipt, and confirmation. Some fake or abusive apps use changing payment channels.
6. Filing only with the wrong agency
If the main issue is lending harassment, file with the SEC. If the main issue is contact harvesting or data misuse, file with the NPC too. If there are threats, impersonation, cyberlibel, or extortion, report to cybercrime authorities as well.
Special Notes for OFWs, Filipinos Abroad, and Foreigners
You can file an SEC iMessage complaint online even if you are outside the Philippines. What matters is that the lending app, company, borrower, transaction, or harmful conduct has a Philippine connection.
For Filipinos abroad and foreigners, practical issues usually include:
- Screenshots may show a foreign time zone, so note your location and time zone.
- If a sworn statement is later required for an SEC, NPC, prosecutor, or court proceeding, documents executed abroad may need consular acknowledgment or an apostille, depending on where they were signed and how they will be used.
- If your Philippine relatives or employer were contacted, ask them to preserve their own screenshots.
- If your foreign employer was contacted, document the reputational harm clearly and calmly.
- If payment was made through Philippine e-wallets or bank accounts, keep the transaction reference numbers.
Foreigners should also distinguish between a personal loan dispute and immigration-related threats. A private lender or collector generally cannot deport someone, hold a passport, or cause arrest merely because of an unpaid civil debt. Threats of deportation, imprisonment, or “blacklisting” should be screenshot and included because they may show deceptive or abusive collection tactics.
Frequently Asked Questions
Can I file an SEC complaint even if I still owe the online lending app?
Yes. The SEC complaint focuses on whether the lender, app, or collector violated lending regulations, collection rules, or authority-to-operate requirements. A remaining balance does not give collectors the right to threaten, shame, deceive, or contact unauthorized third persons.
Will the SEC cancel my loan?
Not automatically. The SEC may investigate the company, require compliance, impose penalties, or take regulatory action. Loan validity, exact balance, and civil liability may still depend on the loan documents, payments, charges, and applicable law.
What if the app contacted my family, friends, or employer?
Include screenshots from those people. Under SEC MC No. 18, contacting persons in the borrower’s contact list other than those named as guarantors or co-makers may constitute an unfair collection practice.
What if the app says I will be arrested for not paying?
Non-payment of a loan is generally a civil matter. However, fraud, threats, identity misuse, or other criminal acts may be separate issues depending on the facts. Screenshot the threat and include it in your SEC complaint, and consider a cybercrime or police report if the threat is serious.
What if the app is not on the SEC list?
Say that clearly in your complaint. Ask the SEC to verify whether the company has a Certificate of Authority and whether the app is a recorded online lending platform. If the app is fake or impersonating a registered company, include proof of the impersonation.
Should I file with the SEC or NPC?
File with the SEC for lending company misconduct, unfair debt collection, unrecorded online lending platforms, and excessive covered-loan charges. File with the NPC when the issue involves misuse of personal data, harvesting contacts, unauthorized disclosure, or privacy violations. Many serious online lending app cases justify filing with both.
Do I need a notarized complaint for the SEC?
For an initial SEC iMessage ticket, you submit information and upload evidence through the online system. If the SEC later requires a sworn statement, affidavit, or formal pleading, follow the specific instruction given for that stage. NPC formal complaints, by contrast, are expressly required to be notarized under the NPC’s complaint-filing instructions. (National Privacy Commission)
How long does an SEC online lending app complaint take?
You can usually create the ticket immediately, but review and action may take weeks or months depending on the evidence, the company’s identity, the number of complainants, and whether the app is registered, unrecorded, fake, or using third-party collectors.
Can I complain if the collector used another number after I blocked them?
Yes. Save each number and message. Repeated use of different numbers can help show a pattern of harassment, evasion, or coordinated collection activity.
What should I do if harassment continues after filing?
Update your existing SEC iMessage ticket with new screenshots and dates. If the conduct involves threats, public posting, identity misuse, or contact harvesting, file or update complaints with the NPC and cybercrime authorities as appropriate.
Key Takeaways
- The SEC is the primary regulator for Philippine lending companies, financing companies, and their online lending platforms.
- The strongest complaints identify the company behind the app, not just the app name.
- SEC MC No. 18 prohibits threats, abusive language, false representations, public shaming, and unauthorized contact with people in your contact list.
- For covered small, short-term unsecured loans, SEC MC No. 3, Series of 2022 implements caps on interest, fees, penalties, and total cost.
- File through SEC iMessage under Complaints on Financing and Lending Companies, attach organized evidence, and keep your ticket updated.
- File parallel complaints with the NPC for privacy violations and with cybercrime authorities for threats, cyberlibel, identity misuse, or online extortion.