If an online lending app is harassing you, contacting your family or employer, shaming you online, threatening arrest, or using your phone contacts to collect a debt, you can file a complaint in the Philippines. The main office for complaints against lending companies, financing companies, and online lending platforms is the Securities and Exchange Commission (SEC), but you may also need the National Privacy Commission (NPC), PNP Anti-Cybercrime Group, NBI Cybercrime Division, or DICT Cyber Hotline depending on what happened. This guide explains where to file, what evidence to prepare, what laws protect you, and what to expect after filing.

What Counts as a Valid Complaint Against an Online Lending Company?

A complaint against an online lending company is not limited to “I cannot pay” or “the interest is high.” The strongest complaints usually involve illegal collection behavior, data privacy violations, misleading loan terms, or unlicensed lending activity.

Common reasons to complain include:

The collector threatens to hurt you, shame you, sue you without basis, or have you arrested.
The app contacts people in your phonebook who are not guarantors or co-makers.
Your photo, ID, name, workplace, or loan details are posted or sent to others.
The app uses insults, obscene language, repeated calls, or harassment.
You were charged hidden fees or the actual interest was not clearly disclosed.
The company uses a different app name and hides its real corporate identity.
The app has no SEC Certificate of Authority to operate as a lending or financing company.
Your data is retained, shared, or used beyond what you agreed to.
A “collector” refuses to identify the company, his or her name, or the basis of the debt.

A borrower may still owe a legitimate debt, but a lender cannot use illegal, abusive, deceptive, or privacy-invasive methods to collect it. Philippine regulators have repeatedly warned online lending platforms against harassment, public shaming, unlawful use of personal data, and contacting non-guarantor contacts for debt collection.

Which Government Agency Should You File With?

Different agencies handle different parts of the problem. Filing with the wrong office is a common reason complaints get delayed.

Problem	Where to File	Why This Office Handles It
Harassment by an online lending app, unfair collection, abusive collectors, unlicensed lending	SEC Financing and Lending Companies Division / SEC iMessage	SEC regulates lending companies and financing companies under laws such as RA 9474 and RA 8556.
App accessed contacts, messaged your phonebook, posted your photo or ID, misused personal data	National Privacy Commission (NPC)	NPC enforces the Data Privacy Act of 2012, or RA 10173.
Threats, extortion, fake app, identity theft, hacking, cyberlibel, scams	PNP Anti-Cybercrime Group, NBI Cybercrime Division, DICT Cyber Hotline	These offices investigate cybercrime and criminal complaints.
Bank, credit card, e-wallet, or BSP-supervised institution	Bangko Sentral ng Pilipinas (BSP)	BSP handles complaints against BSP-supervised financial institutions, but online lending apps are generally referred to the SEC.
Refunds, damages, civil claims, or debt disputes requiring a court order	Court, usually through Small Claims or ordinary civil action depending on the case	Regulators impose administrative sanctions, but courts decide many claims for damages or money recovery.

The SEC’s official ticketing platform is SEC iMessage. The SEC describes it as its official web-based platform for inquiries, complaints, incidents, and requests, where a unique electronic ticket is generated and can be tracked. For lending and financing company concerns, the relevant SEC service is under complaints on financing and lending companies. (Securities and Exchange Commission)

Legal Basis: Your Rights Against Abusive Online Lending Practices

SEC Rules on Unfair Debt Collection

The most important SEC rule for abusive collection is SEC Memorandum Circular No. 18, Series of 2019, titled Prohibition on Unfair Debt Collection Practices of Financing Companies and Lending Companies.

It applies not only to lending and financing companies, but also to third-party collection agencies and service providers hired by them. The company cannot escape liability by saying, “It was only our collector who did that.” Under the SEC rules, the lending or financing company remains ultimately responsible for its collection agents.

The SEC circular prohibits practices such as:

Using or threatening violence or other criminal means to harm a borrower’s person, reputation, or property.
Threatening legal action that cannot legally be taken.
Using insults, obscene language, or abusive language.
Publishing or disclosing the names and personal information of borrowers who allegedly refuse to pay, except in lawful situations.
Communicating false credit information.
Using false representation or deceptive means to collect a debt or obtain borrower information.
Contacting borrowers at unreasonable or inconvenient times, generally before 6:00 a.m. or after 10:00 p.m., subject to limited exceptions.
Contacting people in the borrower’s contact list other than those named as guarantors or co-makers. (SEC Appointment System)

SEC penalties may include fines, suspension, or revocation of the company’s Certificate of Authority, depending on the violation and whether it is a repeat offense. Administrative penalties are separate from possible civil, criminal, or data privacy liability.

Data Privacy Rights Under RA 10173

The Data Privacy Act of 2012, or RA 10173, protects personal information such as your name, contact details, phonebook contacts, photos, IDs, address, workplace, and financial information.

In online lending cases, the most common privacy issues are:

The app requests excessive permissions, such as access to your full contact list, photos, files, or messages.
The app uploads or stores your contacts beyond what is necessary.
Collectors message people who are not guarantors.
Your debt, ID, face, address, or workplace is shared with others.
The lender keeps using your data even after the loan has been paid or the purpose has ended.

The 2026 joint public advisory of the DICT, NPC, and SEC emphasized that online lending platforms may not process personal data in an excessive, unauthorized, or disproportionate way. It also states that, for debt collection, only a guarantor may be contacted; contacting other persons in a borrower’s contact list is prohibited.

A character reference is not automatically a guarantor. A guarantor is someone who expressly agrees to answer for the debt if the borrower fails to pay. A person listed only as a reference should not be harassed, threatened, or treated as liable for the loan.

Truth in Lending and Disclosure of Loan Charges

Under the Truth in Lending Act, or RA 3765, creditors must clearly disclose the true cost of credit before the loan is finalized. This includes the amount financed, finance charges, and the percentage finance charge or simple annual rate. (Lawphil)

This matters because many online lending complaints involve:

“Processing fees” deducted immediately from the loan proceeds.
A very short repayment period that makes the real cost much higher.
Interest or penalties not clearly shown before acceptance.
Different amounts shown in the app, text messages, and collection demand.
A loan advertised as low-interest but charged with hidden deductions.

High interest alone does not automatically make a complaint successful. But if the lender failed to disclose the true cost, used misleading screens, hid charges, or imposed charges not agreed upon, raise this clearly in the complaint.

Financial Consumer Protection Under RA 11765

The Financial Products and Services Consumer Protection Act, or RA 11765, recognizes key financial consumer rights, including fair treatment, disclosure and transparency, protection against fraud and misuse, data privacy, and timely handling of complaints. It covers financial products and services, including credit and digital financial products. (Supreme Court E-Library)

This law is useful when your complaint involves unfair treatment, misleading information, poor complaint handling, or abusive conduct by a financial service provider.

Possible Civil and Criminal Liability

Some online lending behavior can go beyond an administrative violation.

Under the Civil Code of the Philippines, Articles 19, 20, 21, and 26 protect people from acts contrary to law, morals, good customs, public policy, and violations of dignity, privacy, and peace of mind. These provisions may support a claim for damages when a borrower or contact suffers humiliation, reputational injury, or harassment. (Lawphil)

Depending on the facts, threats and online shaming may also involve the Revised Penal Code and the Cybercrime Prevention Act of 2012, or RA 10175. Possible issues may include threats, coercion, unjust vexation, libel, cyberlibel, identity theft, or computer-related fraud. Criminal liability depends on the exact words used, how they were sent, whether they were published to others, and the evidence available.

Before You File: Secure Evidence Immediately

The quality of your evidence often determines how seriously and quickly your complaint can be acted upon. Do this before deleting the app, changing phones, or blocking all numbers.

Identify the lender. Save the app name, company name, SEC registration number, Certificate of Authority number, website, Play Store or App Store page, email address, phone numbers, and payment channels. Many online lending apps use a trade name that is different from the registered company name.
Save the loan documents. Take screenshots or download copies of the loan agreement, disclosure statement, promissory note, repayment schedule, interest, penalties, processing fees, service fees, and privacy policy.
Preserve collection messages. Screenshot texts, chats, emails, app notifications, Facebook messages, Viber/WhatsApp/Telegram messages, and call logs. Make sure the screenshots show the sender, number or account name, date, time, and full message.
Document third-party harassment. If collectors contacted your family, employer, co-workers, or phonebook contacts, ask them to save the messages and screenshots. If the case becomes formal, their sworn statements or affidavits may help.
Make a timeline. Write the loan date, amount received, amount deducted, due date, payments made, first collection message, first threat, and all major incidents.
Calculate the money trail. List the amount you actually received, total amount demanded, payments made, penalties added, and remaining balance claimed by the lender.
Be careful with call recordings. In the Philippines, recording private communications can raise issues under the Anti-Wiretapping Law, RA 4200. Safer evidence includes screenshots of messages, call logs, voicemails voluntarily left by the collector, emails, and written statements from witnesses.
Do not post revenge content online. Avoid posting the collector’s personal details, private photos, or threats of your own. Keep the evidence for the agencies handling the complaint.

Step-by-Step: How to File a Complaint With the SEC

1. Verify Whether the Company Is Registered or Licensed

Check whether the company behind the app is registered with the SEC and has authority to operate as a lending or financing company. A business name or app name is not enough. Look for:

SEC company registration number;
Certificate of Authority to Operate as a Lending Company or Financing Company;
registered corporate name;
app name or trade name;
office address;
official email and contact numbers.

A lending company generally needs a Certificate of Authority from the SEC before it can legally operate as a lending company under the Lending Company Regulation Act of 2007, or RA 9474. Financing companies are regulated under the Financing Company Act, RA 8556.

If the app refuses to disclose the registered company, uses only mobile numbers, or changes app names frequently, include that in your complaint.

2. Prepare a Clear Complaint Narrative

Your complaint should be factual, organized, and easy to verify. Avoid long emotional paragraphs without dates or evidence.

A practical complaint structure is:

Your full name and contact details;
name of the online lending app;
registered company name, if known;
loan date and amount;
amount actually received after deductions;
due date and amount demanded;
summary of abusive collection or privacy violation;
names, numbers, or accounts used by collectors;
names of people contacted by the lender;
laws or rules violated, if known;
relief requested.

You can request the SEC to investigate, require the company to answer, stop abusive collection, correct or explain charges, sanction the company if warranted, and endorse related privacy or criminal issues to the proper office when appropriate.

3. File Through SEC iMessage

Go to SEC iMessage and open a ticket. The SEC’s iMessage guide explains that users may open a new ticket, sign in through eSECURE, choose the relevant service, and track the complaint using the generated ticket. (Securities and Exchange Commission)

For online lending complaints, choose the service related to Complaints on Financing and Lending Companies under the SEC Financing and Lending Companies Division, if available in the portal.

Attach your evidence in clear files. Use descriptive filenames such as:

Loan Agreement - App Name - Date.pdf
Threat Messages - Collector Number - Date.png
Messages to Employer - Date.png
Payment Receipts.pdf
Privacy Policy Screenshot.png
Timeline of Incidents.pdf

4. Keep the Ticket Number and Monitor Replies

After submission, save your SEC ticket number. Check the portal and your email regularly. The SEC may ask for more details, clearer screenshots, proof of loan, proof that the app contacted others, or the correct company name.

The SEC process may involve evaluation, referral to the proper SEC division, a request for comment from the company, further investigation, or administrative action. Timelines vary depending on the completeness of evidence, the number of complaints, and whether the company can be identified and reached.

5. File Separate Complaints for Data Privacy or Criminal Acts

Do not rely on one complaint if several legal problems are involved.

If the app accessed your contacts, messaged your phonebook, posted your ID, or shared your personal data, file a privacy complaint with the National Privacy Commission. NPC complaint procedures may require a notarized complaint-assisted form or verified complaint, supporting evidence, and witness affidavits when applicable. (National Privacy Commission)

If there are threats, extortion, identity theft, fake accounts, hacking, or scams, report to law enforcement. The 2026 DICT-NPC-SEC advisory lists the following channels for abusive online lending behavior and related cyber concerns:

SEC FINLEND through SEC iMessage;
DICT Cyber Hotline at 1326@dict.gov.ph;
NBI Cybercrime Division at ccd@nbi.gov.ph;
PNP Anti-Cybercrime Group at acg@pnp.gov.ph or onlinecims.ocs@gmail.com.

Sample Complaint Format

Use this as a practical structure. Replace the details with your own facts.

I am filing this complaint against [name of online lending app], operated by [company name, if known], for unfair debt collection, harassment, and unauthorized use of my personal data.

On [date], I borrowed [amount] through the app. The amount released to me was only [amount received] after deductions of [fees deducted]. The app demanded payment of [amount demanded] by [due date].

Beginning [date], collectors using the numbers/accounts [list numbers or accounts] sent messages threatening [describe threats]. They also contacted [names or relationship of persons contacted], who were not guarantors or co-makers of my loan. Screenshots of these messages are attached.

I respectfully request the SEC to investigate the company and its collectors for possible violations of SEC Memorandum Circular No. 18, Series of 2019, RA 9474 or RA 8556 if applicable, RA 11765, and other relevant laws and regulations. I also request appropriate action to stop the abusive collection practices and require the company to explain the charges and collection conduct.

Documents, Fees, and Timelines

Item	What to Prepare	Practical Notes
SEC complaint	Complaint narrative, screenshots, loan agreement, payment receipts, app details, company details, collector numbers	Filing is through SEC iMessage. A ticket is generated and should be monitored.
NPC complaint	Complaint form or verified complaint, proof of data misuse, screenshots, privacy notice, witness affidavits if any	Notarization may be needed for formal complaints. Scanned or electronic submission rules should be checked on the NPC website.
PNP/NBI cyber complaint	Valid ID, screenshots, URLs, account names, phone numbers, messages, proof of identity theft or threats	Bring originals or the device if asked. Do not alter screenshots.
Civil claim or small claims	Proof of loan, payments, demand letters, computation, IDs, addresses of parties	Small claims may be used for certain money claims within the current jurisdictional limit, but it is not designed for complex injunctions or criminal/privacy sanctions.
OFW or foreign complainant documents	Passport or ID, proof of Philippine transaction, screenshots, authorization if representative files	Some affidavits executed abroad may need consular notarization or apostille depending on use.

For timelines, SEC iMessage creates a ticket after filing, but substantive action can take weeks or months depending on the evidence and the respondent. NPC and cybercrime complaints also vary. Urgent threats, identity theft, extortion, or ongoing public shaming should be reported to cybercrime authorities immediately, while the SEC or NPC complaint is also pending.

Common Mistakes That Weaken Online Lending Complaints

Filing Only an Emotional Narrative Without Evidence

A complaint saying “they harassed me” is less effective than a complaint with dated screenshots, phone numbers, app details, and a timeline. Regulators need proof that can be matched to the lender or collector.

Complaining to the BSP When the App Is Not BSP-Supervised

Many borrowers send online lending complaints to the BSP because the issue involves money. But complaints against ordinary lending companies, financing companies, and online lending apps are generally under the SEC. BSP materials also direct complaints about financing/lending companies and online lending apps to the SEC. (Bangko Sentral ng Pilipinas)

Assuming a Character Reference Is Liable for the Loan

A character reference is usually someone who confirms identity or contact information. A guarantor is different. A guarantor must expressly agree to be responsible for the debt. Collectors should not pressure references, relatives, co-workers, or phonebook contacts as if they owe the loan.

Deleting the App Before Saving Evidence

Borrowers often uninstall the app immediately after harassment begins. This may remove access to the loan agreement, disclosure screen, privacy policy, payment history, and in-app messages. Save evidence first.

Paying to a Random Personal Account Without Verification

Some collectors pressure borrowers to pay through personal GCash, Maya, or bank accounts. Before paying, verify that the payment channel belongs to the lender or its authorized collector. Save receipts and screenshots of payment instructions.

Ignoring the Debt Completely

Abusive collection can be reported even if the debt is unpaid. But ignoring all communications may make it harder to resolve the account, verify the balance, or stop further charges. A better approach is to dispute illegal charges and harassment in writing while keeping proof of legitimate payments.

Special Situations

The Online Lender Contacted My Employer or Co-Workers

If your employer or co-workers were contacted to shame you or pressure payment, include this in both the SEC and NPC complaints. Attach screenshots from the persons contacted. If the message disclosed your debt, photo, ID, or personal information, emphasize the privacy violation and reputational harm.

The App Messaged Everyone in My Phone Contacts

This is one of the most serious online lending privacy issues. The 2026 DICT-NPC-SEC advisory states that contacting persons in a borrower’s contact list other than guarantors is prohibited, and only a guarantor may be contacted for debt collection.

File with the SEC for unfair collection and with the NPC for data privacy violations. If the messages include threats, extortion, fake accusations, or public shaming, report to cybercrime authorities as well.

The Lender Threatened to Have Me Arrested

Nonpayment of a debt is generally a civil matter. A collector cannot simply order your arrest because you missed a loan payment. Criminal issues may arise only if there are separate facts, such as fraud, falsified documents, bouncing checks, identity theft, or other criminal acts.

Threats of arrest made to scare a borrower, especially when the collector has no legal basis, should be documented and reported.

I Am an OFW or Living Abroad

You can still file an SEC complaint online through SEC iMessage if the lending company or transaction is in the Philippines. Keep screenshots, payment records, and app details.

If you need someone in the Philippines to file documents or appear for you, that person may need a Special Power of Attorney. If the document is signed abroad, it may require apostille or Philippine consular notarization depending on the receiving office and the country where it is executed.

I Am a Foreigner Who Borrowed From a Philippine Online Lending App

Foreigners dealing with Philippine online lending companies may still raise complaints with Philippine regulators if the lender, app, data processing, or collection conduct is connected to the Philippines. Prepare your passport or valid ID, Philippine contact details if any, proof of the loan, proof of payment, and evidence of harassment or data misuse.

The App Is Not on the SEC List

Still file the complaint. Tell the SEC that you could not verify the company’s authority to operate, and attach the app page, website, numbers, and payment channels. Unlicensed or disguised lending activity is itself important information for regulators.

Frequently Asked Questions

Where do I file a complaint against an online lending app in the Philippines?

File with the SEC through SEC iMessage if the complaint involves an online lending app, lending company, financing company, or collection agency. File separately with the NPC if there is data privacy abuse, and with PNP ACG or NBI Cybercrime Division if there are threats, scams, identity theft, or other cybercrimes.

Can I complain even if I still owe money?

Yes. A lender may collect a valid debt, but it must do so lawfully. Being late or unable to pay does not give a collector the right to threaten you, shame you, contact unrelated people, misuse your data, or lie about legal consequences.

Is it illegal for an online lender to contact my phone contacts?

For debt collection, contacting people in your contact list who are not guarantors or co-makers is considered an unfair collection practice and may also be a data privacy issue. A character reference is not automatically liable for your loan.

Can the SEC cancel my debt?

The SEC can investigate and impose administrative sanctions on lending or financing companies. It may also require explanations or corrective action. But cancellation of debt, refund, damages, or final determination of disputed monetary liability may require settlement, court action, or another proper proceeding depending on the facts.

What if the online lender posts my name, photo, or ID online?

Save screenshots immediately, including the URL, account name, date, time, and audience if visible. File with the SEC for unfair collection and with the NPC for data privacy violations. If the post contains false accusations, threats, or identity misuse, report to cybercrime authorities.

Do I need a lawyer to file with the SEC?

You can file an SEC iMessage complaint yourself. A lawyer is not required just to submit a complaint. For formal NPC proceedings, criminal complaints, civil damages, or complicated disputes involving large amounts, legal assistance may help with affidavits, evidence, and strategy.

What evidence is most useful?

The most useful evidence includes the loan agreement, disclosure statement, screenshots of threats, call logs, messages sent to contacts, payment receipts, app screenshots, privacy policy, company details, and a timeline of events. Evidence from third parties contacted by the collector is especially helpful.

Can I file a complaint if the app has already been deleted from the app store?

Yes. Submit whatever you preserved: screenshots, APK details if available, app page screenshots, messages, payment channels, company names, emails, phone numbers, and receipts. If the app disappeared after complaints, mention that in your SEC report.

How long does an online lending complaint take?

A ticket through SEC iMessage may be generated after submission, but investigation and action can take weeks or months depending on the evidence, company response, and complexity. Urgent threats, extortion, identity theft, or public shaming should be reported to cybercrime authorities immediately.

Key Takeaways

The main agency for complaints against online lending companies in the Philippines is the SEC, usually through SEC iMessage.
File with the NPC if the app accessed contacts, shared personal information, posted your photo or ID, or misused your data.
Report to PNP ACG, NBI Cybercrime Division, or DICT Cyber Hotline if there are threats, scams, extortion, hacking, or identity theft.
SEC Memorandum Circular No. 18, Series of 2019 prohibits abusive collection practices, including threats, insults, public shaming, and contacting non-guarantor contacts.
Save evidence before deleting the app: loan documents, screenshots, call logs, payment receipts, app details, and messages sent to other people.
A character reference is not the same as a guarantor. References should not be treated as liable for your debt.
You may complain even if the loan is unpaid. A valid debt does not justify illegal collection.
Administrative complaints can lead to sanctions, but refunds, damages, or final debt disputes may require settlement or court action.