The rise of financial technology has led to a proliferation of Online Lending Applications (OLAs) and lending companies in the Philippines. While these provide quick access to credit, they have also become a breeding ground for predatory practices, including unregistered operations, exorbitant interest rates, and unfair debt collection practices.

For borrowers who find themselves victims of fraud or harassment, the Philippine legal system provides several administrative and criminal avenues for redress.

I. Identifying the Violation

Before filing a complaint, it is essential to determine which specific laws or regulations have been breached. Common violations include:

Lack of Authority: Operating as a lending or financing company without a Certificate of Incorporation and a Certificate of Authority (CA) from the Securities and Exchange Commission (SEC).
Unfair Debt Collection Practices: Using threats, insults, or profanity; contacting people in the borrower's contact list without consent; or posting "shaming" information on social media.
Violation of the Truth in Lending Act (RA 3765): Failure to disclose the true cost of credit, including interest rates and hidden charges, before the consummation of the transaction.
Data Privacy Violations (RA 10173): Unauthorized processing or sharing of the borrower’s sensitive personal information.

II. Regulatory Jurisdiction: Where to File

The Philippines employs a multi-agency approach to regulating the lending industry. The appropriate agency depends on the nature of the grievance.

1. Securities and Exchange Commission (SEC)

The SEC is the primary regulator of lending and financing companies under Republic Act No. 9474 (Lending Company Regulation Act of 2007).

Best for: Unregistered lenders, unfair debt collection practices, and violations of SEC disclosure rules.

2. National Privacy Commission (NPC)

The NPC handles cases where the lender has misused the borrower’s data.

Best for: Contact list "leaking," unauthorized access to photos/social media, and public shaming.

3. Bangko Sentral ng Pilipinas (BSP)

The BSP supervises banks and their subsidiary lending entities.

Best for: Grievances against bank-owned lending institutions or violations of interest rate caps (where applicable).

4. National Bureau of Investigation (NBI) / PNP Anti-Cybercrime Group (ACG)

Best for: Criminal acts such as online threats, grave coercion, or identity theft.

III. The Step-by-Step Filing Process

Step 1: Verification of Registration

Check if the lending company is registered. The SEC maintains a list of companies with a Certificate of Authority (CA) on its official website. If they are not on the list, they are operating illegally.

Step 2: Documentation and Evidence Gathering

A complaint is only as strong as its evidence. Collect and organize the following:

Transaction Records: Loan contracts, disclosure statements, and proof of payments.
Communications: Screenshots of threatening text messages, emails, or social media posts.
Recording: If possible, recorded phone calls where harassment occurred (noting the limitations of the Anti-Wiretapping Law).
Digital Footprint: The name of the app, the developer, and the platform where it was downloaded.

Step 3: Filing the Formal Complaint

To the SEC:

You must submit a formal letter-complaint or use the SEC i-Message portal. Under SEC Memorandum Circular No. 18, Series of 2019, the complaint should include:

Full name and contact details of the complainant.
Full name and address of the lending company/app.
A clear narration of facts.
The specific relief sought.
An Affidavit of Verification and Non-Forum Shopping.

Note: The SEC’s Corporate Governance and Finance Department (CGFD) specifically handles these investigations.

To the National Privacy Commission (NPC):

If the issue is data-related, you may file a "Sumbong" or a formal complaint via the NPC's online portal. You must demonstrate that you first attempted to resolve the issue with the lender's Data Protection Officer (DPO), if applicable.

IV. Summary of Remedies

Grievance	Primary Agency	Legal Basis
Harassment / Shaming	SEC / NBI	SEC MC No. 18, s. 2019 / Cybercrime Prevention Act
No Certificate of Authority	SEC	R.A. 9474 (Lending Company Regulation Act)
Data Privacy Breach	NPC	R.A. 10173 (Data Privacy Act of 2012)
Hidden Charges / No Disclosure	SEC / BSP	R.A. 3765 (Truth in Lending Act)

V. Legal Consequences for Fraudulent Lenders

Lending companies found in violation of these laws face severe penalties:

Administrative Fines: Ranging from ₱50,000 to ₱2,000,000 depending on the severity and frequency.
Revocation of License: Permanent cancellation of the Certificate of Authority.
Criminal Liability: Imprisonment for officers involved in illegal lending or cyber-harassment.
Cease and Desist Orders (CDO): Immediate shutdown of the lending application and freezing of associated bank accounts.

Under the Cybercrime Prevention Act of 2012, individuals behind these apps can also be prosecuted for online libel and grave coercion, which carry significant prison terms. Victims are encouraged to report these entities promptly to prevent further victimization of the public.