If an online lending app is threatening you, shaming you online, messaging your contacts, charging unexplained fees, or pretending that non-payment automatically means arrest, you can file a complaint in the Philippines. The right office depends on what happened: the Securities and Exchange Commission (SEC) handles lending-company and collection-practice violations, the National Privacy Commission (NPC) handles misuse of your personal data and contact list, and the PNP Anti-Cybercrime Group or NBI Cybercrime Division handles threats, blackmail, identity theft, fake posts, and other possible cybercrimes. This guide explains where to file, what evidence to prepare, what laws protect you, and what to expect after filing.
What Counts as an Online Lending App Complaint?
Not every collection message is illegal. A lender may remind you about a loan, ask for payment, and send a statement of account. But an online lending app or its collector crosses the line when it uses abusive, deceptive, humiliating, or unlawful methods.
Common complaint-worthy situations include:
- Collectors calling or messaging you repeatedly with insults, profanity, or threats
- Threats of arrest, imprisonment, “barangay blotter,” hold departure orders, or public posting when there is no lawful basis
- Messaging your family, friends, employer, co-workers, or phone contacts about your debt
- Posting your photo, ID, loan details, or edited images on social media
- Creating fake group chats to shame you
- Accessing your contact list, photos, or messages beyond what is necessary for the loan
- Charging unclear, excessive, or undisclosed fees
- Using a different company name from the one registered with the SEC
- Operating as a lending app without SEC authority
- Refusing to give a proper statement of account or breakdown of charges
- Continuing harassment after you disputed the account or asked for proper documentation
The key point is this: owing money does not give a lending app the right to harass, shame, threaten, deceive, or misuse your personal data.
Main Agencies for Complaints Against Online Lending Apps
Different agencies handle different parts of the problem. In many real cases, you may need to file with more than one office because abusive online lending often involves both lending violations and privacy violations.
| Problem | Where to File | Main Legal Basis |
|---|---|---|
| Abusive collection, threats by collectors, contacting non-guarantor contacts, misleading loan terms, unregistered lending app | SEC | RA 9474, Lending Company Regulation Act of 2007, RA 8556, Financing Company Act of 1998, SEC Memorandum Circular No. 18, Series of 2019 |
| App accessed or disclosed your contacts, photos, ID, employer details, or private information | National Privacy Commission | RA 10173, Data Privacy Act of 2012 |
| Threats, extortion, blackmail, fake posts, identity theft, cyber libel, edited images, hacking, impersonation | PNP Anti-Cybercrime Group or NBI Cybercrime Division | RA 10175, Cybercrime Prevention Act of 2012, Revised Penal Code |
| Unclear finance charges, undisclosed interest, misleading cost of credit | SEC, sometimes BSP-related if the entity is BSP-supervised | RA 3765, Truth in Lending Act, SEC lending regulations |
| E-wallet, bank, payment, or financial account issue connected to loan disbursement or payment | BSP-supervised provider’s complaint channel, then BSP if applicable | RA 11765, Financial Products and Services Consumer Protection Act |
Legal Basis: Your Rights Against Abusive Online Lending Apps
SEC Rules on Lending Companies and Collection Practices
Most online lending apps in the Philippines are supposed to operate through a corporation registered with the SEC and authorized to engage in lending or financing.
Under the Lending Company Regulation Act of 2007, a lending company is generally a corporation engaged in granting loans from its own capital funds or from funds sourced from not more than 19 persons. Under the Financing Company Act of 1998, financing companies are also SEC-regulated entities that extend credit facilities.
The SEC’s most important rule for abusive online lending complaints is SEC Memorandum Circular No. 18, Series of 2019, which prohibits unfair debt collection practices by financing companies, lending companies, and their third-party collection service providers.
Under that circular, lenders and collectors must use only reasonable and legally permissible collection methods. They must observe good faith and reasonable conduct.
The following are examples of prohibited collection practices:
- Using or threatening violence or criminal means to harm a borrower, reputation, or property
- Threatening legal action that cannot legally be taken
- Using obscenities, insults, or profane language that abuses the borrower
- Publishing or disclosing the names and personal information of borrowers who allegedly refuse to pay, except in limited lawful situations
- Communicating false loan information
- Misrepresenting the character, amount, or legal status of a debt
- Using deception or false representation to collect
- Contacting the borrower before 6:00 a.m. or after 10:00 p.m., except in limited circumstances
- Contacting people in the borrower’s contact list other than guarantors or co-makers
This last point is especially important. Even if the app claims you “consented” when you installed it, SEC rules treat contacting random phone contacts as an unfair debt collection practice when those people are not guarantors or co-makers.
Your Right to Clear Loan Terms
The Truth in Lending Act, RA 3765, requires lenders to disclose the true cost of credit. In practical terms, a borrower should be able to understand:
- Principal amount borrowed
- Amount actually received
- Interest rate
- Service fee, processing fee, platform fee, or other deductions
- Due date
- Total amount payable
- Late payment charges
- Effective cost of the loan
If the app advertised “low interest” but deducted large fees upfront, or if the amount due suddenly became much higher than what was disclosed, include that in your SEC complaint.
RA 11765, the Financial Products and Services Consumer Protection Act, also strengthened consumer protection across financial products and services, including standards on transparency, fair treatment, and responsible conduct by financial service providers.
Your Data Privacy Rights
The Data Privacy Act of 2012 protects personal information, especially when it is collected and processed through apps, websites, and digital systems.
Online lending apps often ask for access to contacts, camera, storage, SMS, location, or social media information. Consent is not a blank check. Personal data processing must still be lawful, fair, transparent, proportionate, and limited to a legitimate purpose.
A privacy complaint may be appropriate when the app or collector:
- Accessed your contact list and messaged people who were not guarantors
- Sent your loan details to family, friends, co-workers, or employers
- Used your photo, ID, or personal information to shame you
- Posted or threatened to post your information online
- Used your contacts for harassment
- Refused to correct, remove, or explain how your data is being used
- Collected more information than necessary for a small loan
The NPC has handled many complaints involving online lending apps, including harassment and public shaming connected to improper personal data use.
Possible Criminal Issues
A loan is usually a civil obligation. That means failure to pay a debt, by itself, does not automatically make a borrower a criminal. The 1987 Constitution provides that no person shall be imprisoned for debt.
But the conduct of collectors may become criminal depending on the facts. Possible offenses may include:
- Grave threats or light threats under the Revised Penal Code
- Grave coercion, light coercion, or unjust vexation
- Cyber libel if defamatory statements are posted online
- Identity theft or computer-related offenses under the Cybercrime Prevention Act
- Extortion or blackmail, depending on the demand and threat
- Falsification or impersonation, if fake documents, fake identities, or fake legal notices are used
The police, NBI, prosecutor, or court will evaluate the exact offense based on the evidence.
Step-by-Step Guide: How to File a Complaint Against an Online Lending App
1. Preserve Evidence Before Blocking or Deleting Anything
Before uninstalling the app, changing your number, deleting messages, or blocking collectors, save your evidence.
Prepare screenshots or screen recordings showing:
- App name and logo
- Google Play or App Store listing
- Developer name, website, email address, and privacy policy
- Loan application screen
- Loan agreement or disclosure statement
- Amount borrowed and amount actually received
- Repayment schedule and due date
- Charges, deductions, penalties, and fees
- Collection messages, calls, and threats
- Date, time, phone number, account name, email, or profile used by the collector
- Messages sent to your contacts, employer, or family
- Social media posts, group chats, or public shaming
- Payment receipts and account numbers used
- Your prior messages asking them to stop or explain the charges
For stronger evidence, do not rely only on cropped screenshots. Save the full conversation, call logs, URLs, profile links, email headers, and original files when possible.
If the collector messaged your contacts, ask those contacts to save screenshots too. Their screenshots may help prove that the app disclosed your loan information to third parties.
2. Identify the Real Company Behind the App
Many lending apps use app names that are different from the registered corporate name. Your complaint is stronger if you can identify both.
Check:
- App name used on Google Play, App Store, Facebook, TikTok, or ads
- Developer name on the app store
- Company name in the loan agreement
- Name in the privacy policy
- SEC registration number, Certificate of Authority number, or lending license details
- Payment recipient name in GCash, Maya, bank transfer, or payment center
- Email address, office address, hotline, or website
You can verify lending or financing companies through official SEC resources, including the SEC i-Message complaint and ticket portal and SEC verification tools such as Check with SEC. The SEC also has official issuances on financing and lending companies through its memorandum circulars page.
If you cannot identify the company, still file. State that the respondent is using a particular app name and attach all details you have.
3. Create a Short Timeline of Events
Agencies handle complaints faster when the facts are organized. A simple timeline is better than a long emotional narrative.
Use this format:
| Date and Time | What Happened | Evidence |
|---|---|---|
| June 1, 2026, 9:10 a.m. | I applied for a ₱5,000 loan through the app but received only ₱3,800 after deductions. | Screenshot of loan page and disbursement receipt |
| June 8, 2026, 11:45 p.m. | Collector sent threats and insults through SMS. | Screenshot of SMS with number visible |
| June 9, 2026, 8:30 a.m. | My employer received a message saying I was a scammer. | Screenshot from employer and witness statement |
| June 10, 2026 | I emailed the app asking them to stop contacting my contacts. | Copy of email |
This timeline will help the SEC, NPC, police, NBI, or prosecutor understand the pattern.
4. Send a Written Complaint to the Lending App First When Safe and Practical
For privacy complaints, the NPC generally expects the complainant to first raise the issue with the personal information controller, which is usually the company operating the app, and wait for action or a response. NPC rules have recognized a 15-day period in this context, subject to exceptions depending on the case.
A written complaint to the lender is also useful for SEC complaints because SEC rules require lending and financing companies to have personnel or a customer service unit to handle borrower complaints.
Your message may be short:
I am disputing the collection practices and data processing connected with my loan account. Your collectors have contacted people who are not my guarantors or co-makers and disclosed my alleged loan information. Please stop contacting third parties, provide a full statement of account, identify the company and collection agency handling my account, and explain how my personal data was collected, used, shared, and stored.
Keep proof that you sent it. Do not include threats or insults. Keep it factual.
If there is immediate danger, extortion, blackmail, identity theft, or an active threat to publish private images or information, file with law enforcement without waiting.
5. File a Complaint with the SEC
File with the SEC if your complaint involves:
- Abusive collection
- Contacting your phone contacts
- Public shaming
- Misrepresentation of legal consequences
- Failure to disclose true charges
- Unregistered or unauthorized lending app
- Unauthorized online lending platform
- Violation of SEC lending rules
You may submit a complaint or ticket through the SEC i-Message portal.
Your SEC complaint should include:
- Your full name and contact details
- App name and company name, if known
- Loan amount, date borrowed, amount received, and amount demanded
- Clear description of abusive collection acts
- Names, numbers, emails, or social media accounts used by collectors
- Evidence attachments
- A request for SEC investigation for possible violation of SEC Memorandum Circular No. 18, Series of 2019, and other applicable lending regulations
For example:
I respectfully request SEC investigation of this online lending app and its collectors for unfair debt collection practices, including contacting persons in my phone contact list who are not guarantors or co-makers, using threats and insulting language, and misrepresenting the legal consequences of non-payment. I also request verification of whether the app and the company behind it are authorized to operate as a lending or financing company.
The SEC may evaluate whether the company is registered, whether it has authority to lend, whether it reported its online lending platform, and whether its collection practices violate SEC rules.
6. File a Complaint with the National Privacy Commission
File with the NPC if the online lending app misused your personal data.
The NPC complaint process usually requires a sworn or verified complaint, evidence, and proof of identity. The NPC provides an official guide for filing complaints and a Complaint-Affidavit form.
Common NPC evidence includes:
- Screenshots showing the app accessed or used your contacts
- Messages sent to your relatives, friends, employer, or co-workers
- Proof that those recipients were not guarantors or co-makers
- Privacy policy of the app
- Screenshots of app permissions
- Your written complaint to the app or its Data Protection Officer
- The app’s reply or proof that it did not respond
- Your valid government ID
- Witness affidavits or statements from people contacted by the app
NPC complaints may be filed through the methods allowed by the Commission, such as personal filing, courier, registered mail, or email submission, depending on the current NPC instructions. If signing a complaint-affidavit, expect notarization to be required.
Based on NPC process information, the Complaints and Investigation Division may act on whether to give due course to a complaint or dismiss it without prejudice within a stated period after receipt. Full adjudication can take months, especially if the complaint proceeds through hearings, pleadings, and decision.
7. File with PNP Anti-Cybercrime Group or NBI Cybercrime Division for Threats or Online Abuse
Go to law enforcement if the app or collector:
- Threatens to post your photo, ID, or private information
- Posts defamatory statements online
- Creates fake social media accounts using your identity
- Edits your picture or creates humiliating images
- Threatens your safety or your family
- Demands payment through blackmail
- Hacks, impersonates, or uses unauthorized access
- Sends fake legal documents, fake warrants, or fake court notices
You may report cybercrime-related incidents to the PNP Anti-Cybercrime Group or seek investigative assistance from the NBI Cybercrime Division, which has an official citizen’s charter page for investigative assistance for victims of computer crimes.
Bring:
- Valid ID
- Your phone or device containing the original messages
- Screenshots and screen recordings
- URLs and account links
- Phone numbers and email addresses used
- Names of witnesses
- Printed copies of evidence
- Draft complaint-affidavit, if available
Do not rely only on printed screenshots. Investigators may need to inspect the original device, metadata, links, account names, and timestamps.
What to Include in Your Complaint
A good complaint is specific, organized, and evidence-based. Avoid simply saying, “They harassed me.” Describe exactly what happened.
Include these details:
| Section | What to Write |
|---|---|
| Complainant details | Your full name, address, email, phone number, and ID |
| Respondent details | App name, company name, developer name, collector numbers, email, website |
| Loan details | Date of loan, principal, amount received, due date, charges, amount demanded |
| Violations | Threats, insults, late-night calls, contacting third parties, data misuse, unclear charges |
| Evidence | Screenshots, recordings, call logs, emails, payment receipts, app screenshots |
| Prior action | Complaint sent to app, customer service ticket, Data Protection Officer email |
| Requested action | Investigation, order to stop harassment, data protection action, penalties, correction of account, referral to proper agency |
Sample Complaint Summary
You can use this structure:
I borrowed through the online lending app [name of app] on [date]. The advertised loan amount was ₱[amount], but I received only ₱[amount] after deductions. The app later demanded ₱[amount]. Beginning [date], collectors using the numbers [numbers] sent threats and insults to me and contacted my relatives, employer, and other phone contacts who were not guarantors or co-makers. They disclosed my alleged loan information and threatened to post my photo online. I am attaching screenshots, call logs, payment records, app details, and messages sent to third parties. I respectfully request investigation for unfair debt collection practices, possible unauthorized lending activity, and unlawful processing or disclosure of personal data.
Evidence Checklist
| Evidence | Why It Matters |
|---|---|
| Valid government ID | Proves identity of complainant |
| Loan agreement or disclosure statement | Shows loan terms, charges, and company details |
| Screenshot of amount received | Proves actual disbursement |
| Screenshot of repayment demand | Shows amount being collected |
| App store listing | Helps identify app name and developer |
| Privacy policy and app permissions | Useful for data privacy complaint |
| Collection messages | Proves threats, insults, or misrepresentation |
| Call logs | Shows frequency and timing of calls |
| Messages to contacts or employer | Proves third-party disclosure or harassment |
| Witness screenshots or statements | Supports your claim that others were contacted |
| Payment receipts | Shows amounts already paid |
| Complaint email to app | Shows you raised the issue directly |
| Notarized complaint-affidavit | Often required for NPC or criminal complaints |
Fees, Timelines, and Practical Expectations
| Office | Filing Method | Typical Requirements | Practical Timeline |
|---|---|---|---|
| SEC | Online ticket or direct submission through SEC channels | Complaint, evidence, app/company details | Acknowledgment may be faster than resolution; enforcement review can take weeks or months |
| NPC | Complaint-affidavit, evidence, ID, proof of prior complaint when applicable | Notarized complaint and supporting documents | Initial action may take weeks; full adjudication may take several months |
| NBI Cybercrime Division | In-person complaint or investigative assistance process | ID, device, evidence, complaint form | Intake may be quick, but investigation and prosecution depend on evidence and case complexity |
| PNP Anti-Cybercrime Group | Cybercrime report or complaint | ID, screenshots, device, URLs, witness details | Investigation timeline varies by urgency, respondent identity, and evidence |
For notarization, bring a valid ID and sign the complaint-affidavit before the notary, not beforehand unless instructed. If you are abroad, Philippine agencies may require a consularized document, an apostilled document, or a Special Power of Attorney if someone in the Philippines will file or follow up for you.
Common Mistakes to Avoid
1. Filing Only With One Agency When Several Violations Happened
If the app contacted your phone contacts, that may involve both SEC unfair collection rules and data privacy violations. If the collector also threatened to post your photo online, cybercrime issues may also arise.
A practical approach is:
- SEC for abusive collection and lending violations
- NPC for misuse of personal data
- PNP/NBI for threats, blackmail, identity theft, or online public shaming
2. Deleting the App Too Early
Uninstalling the app may remove useful evidence, including loan details, disclosure statements, permission screens, customer service details, and account history. Save everything first.
3. Paying Random Personal Accounts Without Verification
Some borrowers panic and pay collectors through personal GCash, Maya, or bank accounts. Before paying, ask for:
- Official statement of account
- Registered company name
- Official payment channel
- Receipt
- Confirmation that payment will be applied to your loan
If you pay to a random account, it may be harder to prove that the payment went to the lender.
4. Ignoring the Debt Completely
Filing a complaint does not automatically cancel a valid loan. It addresses unlawful conduct. You can dispute abusive collection and still ask for a proper accounting of the amount actually owed.
A calm written message is usually better than silence:
I am willing to review and settle any lawful and properly documented obligation. Please send a complete statement of account and stop unlawful third-party contact and harassment.
5. Believing Fake Arrest or Court Threats
Collectors sometimes send fake warnings such as “warrant of arrest,” “police case,” “barangay case,” “estafa case,” or “hold departure order.” A private collector cannot simply create those consequences by sending a message.
Debt alone does not automatically result in imprisonment. But separate facts, such as fraud, falsified documents, or bouncing checks, may create different legal issues. Read the actual message carefully and preserve it.
6. Posting Back Publicly
It is understandable to feel angry, especially when collectors shame you first. But posting names, photos, numbers, or accusations online may create your own legal exposure. Preserve the evidence and submit it to the proper agency instead.
Special Notes for OFWs and Foreigners
Filipinos abroad and foreigners dealing with Philippine online lending apps can still prepare complaints if they are personally affected.
Practical points:
- Keep Philippine SIM records, app screenshots, and payment receipts.
- Use your passport, residence card, or government ID if you do not have a Philippine ID.
- If signing documents abroad, check whether the receiving office requires consular notarization, apostille, or local notarization.
- If authorizing someone in the Philippines to file, prepare a Special Power of Attorney.
- If your relatives in the Philippines were contacted, ask them to save screenshots and prepare statements.
- If the app operates in the Philippines or processes data in connection with Philippine borrowers, Philippine regulators may still have jurisdiction over the local company, processor, or lending operation.
Foreigners should also check whether the loan documents identify a Philippine corporation, local office, or local payment channel. That information helps agencies trace the proper respondent.
Frequently Asked Questions
Can I file a complaint even if I still owe money to the online lending app?
Yes. A complaint against harassment, threats, privacy violations, or unfair collection is separate from the question of whether you still owe a valid loan. The app may collect lawful debt, but it cannot use illegal or abusive methods.
Where should I file first: SEC, NPC, PNP, or NBI?
File based on the main problem. If the issue is abusive collection or an unregistered lending app, file with the SEC. If your contacts or personal data were misused, file with the NPC. If there are threats, blackmail, fake posts, identity theft, or cyber harassment, file with PNP or NBI. Many cases justify filing with more than one office.
Can online lending apps legally contact my contacts?
Collectors may communicate with actual guarantors, co-makers, or people who legally undertook responsibility for the loan. But under SEC rules, contacting people in your phone contact list who are not guarantors or co-makers is treated as an unfair debt collection practice, even if the app claims you gave consent through app permissions.
Can I be arrested for not paying an online lending app?
Non-payment of debt, by itself, does not automatically lead to arrest or imprisonment. The Philippine Constitution prohibits imprisonment for debt. However, separate acts such as fraud, falsification, or other criminal conduct may be evaluated differently. Fake arrest threats from collectors should be saved and reported.
What if the app is no longer on Google Play or the App Store?
You can still file a complaint. Submit screenshots, APK details if available, old app links, developer name, website, privacy policy, payment accounts, collector numbers, and messages. The app’s removal does not erase possible liability.
What if the collector messaged my employer?
Save the employer’s screenshot and ask the employer or HR representative to preserve the message. If the message disclosed your debt, insulted you, or threatened your employment, include it in both SEC and NPC complaints. If the message was defamatory or threatening, law enforcement may also be relevant.
Do I need a lawyer to file a complaint?
For initial complaints with the SEC, NPC, PNP, or NBI, many people file on their own using evidence, complaint forms, and affidavits. Legal assistance becomes more useful if the case involves criminal prosecution, damages, settlement negotiations, multiple respondents, or court proceedings.
How long does an online lending app complaint take?
It depends on the agency and complexity. SEC review may take weeks or months, especially if enforcement action is needed. NPC complaints can take months if they proceed beyond initial evaluation. Cybercrime investigations depend heavily on the quality of evidence and whether the respondent can be identified.
Can I ask the lending app to delete my data?
Yes, you may ask the company to explain, correct, stop processing, or delete personal data when legally appropriate. However, save evidence first. If the app already misused your data or refuses to respond properly, include that in your NPC complaint.
What if I already paid but they still keep harassing me?
Submit payment receipts, transaction numbers, screenshots of payment confirmation, and later collection messages. Ask for a statement of account showing how your payments were applied. If harassment continues despite payment or dispute, report the conduct to the SEC and, if personal data was disclosed, to the NPC.
Key Takeaways
- File with the SEC for abusive collection, unregistered lending apps, misleading charges, and violations of lending-company rules.
- File with the NPC when the app misuses your contacts, photos, ID, employer details, or other personal data.
- File with PNP or NBI when there are threats, blackmail, fake posts, identity theft, cyber libel, or other cybercrime issues.
- Save evidence before deleting messages, uninstalling the app, or blocking collectors.
- Contacting random phone contacts who are not guarantors or co-makers is a serious red flag under SEC rules.
- A complaint does not automatically cancel a valid loan, but a lender cannot use harassment, public shaming, threats, or unlawful data processing to collect.
- Organized evidence, a clear timeline, and the correct filing office make your complaint much stronger.