If an online lender asked you to pay a “release fee,” deposited less than the amount promised, charged hidden fees, accessed your contacts, publicly shamed you, or threatened you with arrest, preserve the evidence before deleting the app or blocking the collectors. In the Philippines, complaints involving lending companies, financing companies, and online lending platforms can be filed through the Securities and Exchange Commission’s official SEC iMessage system. Serious cases may also require parallel reports to the National Privacy Commission, the police, the National Bureau of Investigation, or the bank or e-wallet that received the money.

Is the SEC the Right Agency for Your Complaint?

The SEC regulates lending companies and financing companies under Philippine law. This includes many businesses offering loans through mobile applications, websites, social media pages, and other online lending platforms.

A complaint may be filed with the SEC even when the online lending platform appears unregistered or its operator cannot be immediately identified. The SEC, National Privacy Commission, and Department of Information and Communications Technology clarified in a March 18, 2026 joint advisory that rules on unlawful data processing and abusive collection apply to entities offering or facilitating loans through online lending platforms, whether recorded or unrecorded.

However, the proper agency depends on the kind of institution and violation involved:

Situation	Main agency or action
Lending or financing company using an online lending app	SEC
Unregistered or unidentified online lender	SEC, with possible NBI or PNP report
Bank, digital bank, e-money issuer, or BSP-supervised institution	Institution’s consumer assistance unit, then BSP
Cooperative offering loans to members	Cooperative Development Authority
Unauthorized use of contacts, photos, messages, or personal data	National Privacy Commission
Threats, extortion, identity theft, fake loan offers, or fraudulent transfers	PNP Anti-Cybercrime Group or NBI Cybercrime Division
Money sent to a scammer’s bank or e-wallet account	Bank or e-wallet fraud team immediately, plus law-enforcement report

A single incident can fall under several agencies. Filing with the SEC does not prevent you from filing a privacy complaint or criminal complaint based on the same conduct.

What Counts as an Online Lending Scam or Violation?

Not every dispute over a loan is necessarily a scam. Some cases involve a real loan but unlawful charges, misleading disclosures, abusive collection, or misuse of personal information.

Common complaints include the following.

Advance-fee loan scams

The supposed lender promises to release a loan only after the borrower pays a:

Processing fee
Insurance fee
Verification fee
Tax
Security deposit
“Unlocking” charge
Credit score repair fee

After payment, the lender demands another fee or disappears. In many cases, the scammer impersonates a legitimate financing company or uses a fabricated SEC certificate.

Unauthorized or unregistered lending operations

A company may be registered with the SEC as an ordinary corporation but lack a Certificate of Authority to operate as a lending or financing company. Corporate registration by itself does not authorize a business to offer loans to the public.

Some operators also use an app name that is different from the corporation’s legal name, making it difficult for borrowers to determine who is actually collecting the debt.

Hidden deductions and misleading loan terms

Examples include:

Advertising a ₱10,000 loan but releasing only ₱6,000
Requiring repayment based on the full advertised amount
Failing to disclose interest, service charges, processing fees, or penalties before the loan is completed
Changing the due date or repayment amount after disbursement
Automatically renewing or rolling over the loan without informed consent

Excessive interest, fees, or penalties

For unsecured, general-purpose loans with a principal amount of not more than ₱10,000 and a term not exceeding four months, BSP Circular No. 1133 establishes specific limits, including:

Nominal interest of no more than 6% per month
Effective interest of no more than 15% per month, including most fees
Late-payment penalties of no more than 5% per month on the outstanding scheduled amount
Total loan cost not exceeding 100% of the amount borrowed

These caps do not automatically apply to every type of loan. Include the principal, term, deductions, repayment amount, and fee breakdown in the complaint so the SEC can determine which rules apply. (Bangko Sentral ng Pilipinas)

Harassment and public shaming

Possible unfair collection practices include:

Threatening violence, arrest, deportation, or physical harm
Using obscene, insulting, or humiliating language
Pretending to be a police officer, lawyer, judge, court employee, or government official
Sending fabricated warrants, subpoenas, or criminal case notices
Posting the borrower’s name, photograph, identification card, or loan information online
Contacting the borrower’s employer, friends, relatives, or unrelated phone contacts to shame the borrower
Repeatedly calling at unreasonable hours
Threatening an action that the collector has no legal right or genuine intention to take

A legitimate debt does not give a lender permission to harass, threaten, or publicly humiliate the borrower.

Accessing and messaging the borrower’s contacts

The March 2026 DICT-NPC-SEC advisory states that online lenders must not require unnecessary mobile-app permissions or engage in excessive or disproportionate processing of personal information.

An online lender generally may not contact people in a borrower’s phone contacts for collection purposes unless the person is a properly designated guarantor. A character reference is not automatically a guarantor. A guarantor must separately and expressly agree to assume responsibility for the loan.

Legal Basis for Complaints Against Online Lenders

Republic Act No. 9474: Lending Company Regulation Act of 2007

Under the Lending Company Regulation Act, lending companies must generally be organized as corporations and obtain authority from the SEC before conducting lending activities.

The SEC may investigate violations and suspend or revoke a lending company’s Certificate of Authority.

Republic Act No. 8556: Financing Company Act of 1998

The Financing Company Act regulates companies engaged in financing activities. A business may not hold itself out as a financing company without the required SEC authority. (Supreme Court E-Library)

Republic Act No. 11765: Financial Products and Services Consumer Protection Act of 2022

The Financial Products and Services Consumer Protection Act gives financial consumers rights that include:

Fair and equitable treatment
Clear disclosure and transparency
Protection against fraud and misuse of assets
Data privacy and protection
Timely handling and resolution of complaints

Financial service providers must maintain a consumer assistance mechanism that consumers can use without charge. They may also be held responsible for the conduct of their employees, agents, and accredited third-party collection agencies.

The law prohibits abusive debt collection practices. It also authorizes financial regulators, including the SEC, to use mediation, conciliation, enforcement, and adjudicatory processes. In qualifying cases involving purely civil claims for payment or reimbursement, the SEC may adjudicate claims of up to ₱10 million. (Supreme Court E-Library)

Republic Act No. 3765: Truth in Lending Act

The Truth in Lending Act requires creditors to disclose the true cost of credit before the loan transaction is completed. Relevant information includes the amount financed, finance charges, interest rate, and total amount payable.

A lender’s failure to provide a clear disclosure statement can be included in an SEC complaint.

Republic Act No. 10173: Data Privacy Act of 2012

The Data Privacy Act protects borrowers and other individuals from unauthorized, excessive, or unfair processing of personal data.

Possible violations include:

Copying an entire contact list without a legitimate and proportionate purpose
Sending loan information to unrelated contacts
Posting the borrower’s ID, selfie, address, or account details
Using photographs or messages for public shaming
Continuing to retain unnecessary permissions after the stated purpose has ended

SEC Memorandum Circular Nos. 18 and 19, Series of 2019

SEC Memorandum Circular No. 18 prohibits unfair debt collection practices by financing and lending companies.

SEC Memorandum Circular No. 19 requires appropriate disclosures in advertisements and reporting of online lending platforms. These rules are particularly relevant when an app hides the legal name of its operator, gives misleading loan information, or uses an unreported platform.

What to Do Before Filing the SEC Complaint

1. Protect your accounts and money

For a suspected fraud scheme:

Stop sending additional “release,” “verification,” or “unlocking” payments.
Contact your bank or e-wallet provider immediately.
Ask for the recipient account to be flagged, held, traced, or investigated.
Change passwords and PINs if you disclosed credentials.
Never provide an OTP, card verification code, recovery code, or remote access to your device.

Time matters when money has just been transferred. Do not wait for the SEC’s administrative review before notifying the bank or e-wallet.

2. Preserve the app and transaction details

Before uninstalling the app:

Take screenshots of its name, icon, developer, app-store page, website, and privacy notice.
Record the package name or app-store URL.
Capture the permissions requested by the app.
Save the loan offer, repayment screen, account page, and collection messages.
Make a screen recording if important information cannot be captured in one screenshot.

After preserving the evidence, revoke unnecessary permissions, especially access to contacts, photos, storage, microphone, camera, and location.

3. Warn affected contacts

If the lender accessed your contacts, tell family members, co-workers, and friends:

Not to send money
Not to provide your personal information
Not to click links sent by collectors
To save screenshots of any messages they receive
To block the sender after preserving the evidence

A person contacted by the lender may provide a written statement or affidavit describing what was received.

4. Send a written complaint to the lender when safe

Use the lender’s official customer-service or complaints channel. State the problem clearly and ask for:

A complete statement of account
The legal name and SEC details of the company
An explanation of all deductions and charges
Removal of unauthorized charges
Cessation of harassment or contact with non-guarantors
Confirmation that unnecessary personal data has been deleted

Keep proof that the complaint was sent. A written complaint is useful because regulated providers are expected to maintain a consumer assistance mechanism. Do not contact the company first when doing so would create an immediate safety risk.

Evidence and Documents to Prepare

Organize the evidence by date. A chronological, labeled submission is easier to evaluate than dozens of uncaptioned screenshots.

Document or evidence	What it should show
Valid government-issued ID	Identity of the complainant
App, website, or social media screenshots	Platform name, developer, URL, advertisements, and representations
Company information	Legal name, SEC registration number, Certificate of Authority number, address
Loan agreement	Principal, term, due date, interest, charges, and penalties
Disclosure statement	Amount financed, finance charges, and total repayment
Disbursement proof	Amount actually received and date credited
Payment records	Receipts, transaction IDs, account numbers, QR codes
Collection messages	Full conversation, date, time, sender number, and threats
Call logs and recordings	Frequency, timing, identity, and statements of collectors
Privacy evidence	Permissions, contact-list access, public posts, or messages to third parties
Complaint to the lender	Email, ticket, chat, and response or lack of response
Witness statements	Messages received by relatives, employers, or other contacts
Loss computation	Amount borrowed, amount received, amount paid, and disputed charges

Keep original files whenever possible. Do not edit screenshots, delete message context, or rely only on image collages. Name attachments clearly, such as:

Annex A – Loan Advertisement
Annex B – Proof of Disbursement
Annex C – Payment Receipts
Annex D – Threatening Messages
Annex E – Messages Sent to Contacts

How to File an Online Lending Complaint Through SEC iMessage

The SEC’s current online channel is SEC iMessage, a ticket-based platform for complaints, inquiries, reports, and service requests.

1. Verify the company’s identity

Search the legal company name through Check with SEC.

Look for:

The company’s exact registered name
SEC registration status
Whether it is authorized as a lending or financing company
The identity of the company operating the app

Search using both the app name and any company name appearing in the loan agreement, privacy notice, bank transfer, text message, or collection notice.

Do not assume that a displayed SEC registration number proves authority to lend. Scammers sometimes use another company’s name or certificate.

2. Create or access an eSECURE account

SEC iMessage requires authentication through the SEC’s eSECURE portal.

Complete the registration and identity-verification steps shown by the portal. Use an email address and mobile number that you can continue accessing because ticket updates may require follow-up.

3. Open a new SEC iMessage ticket

On the SEC iMessage website:

Select Open a New Ticket.
Read and accept the privacy notice.
Sign in through eSECURE.
Choose the appropriate SEC service.
Select the service for Complaints on Financing and Lending Companies under the Financing and Lending Companies Department’s legal or enforcement function.
Complete the complaint form.
Upload the supporting documents.
Review the information and create the ticket.

SEC iMessage generates a unique ticket that can be monitored through the system. The SEC’s official user manual explains how to create, track, and respond to tickets. (Securities and Exchange Commission)

4. Write a factual and chronological complaint

Include:

Your full name and contact details
Name of the app or platform
Legal name of the operator, if known
Date you applied for or received the loan
Amount advertised
Amount actually released
Amount demanded
Payments already made
Dates and description of the misconduct
Names, phone numbers, accounts, and usernames used
Steps taken to complain to the company
Specific action you are asking the SEC to take

Avoid insults, speculation, or unsupported accusations. State what happened, when it happened, how you know, and which attachment proves it.

5. Upload the strongest evidence

Prioritize evidence that establishes:

The identity of the lender or collector
The loan terms
The actual flow of money
The misleading representation, excessive charge, harassment, or data misuse
The loss or injury suffered

Where the system limits file size, combine related documents into organized PDF files. Keep readable copies of the originals.

6. Save and monitor the ticket

Record the ticket number and check the status regularly.

The SEC may:

Ask for missing documents
Request clarification
Require the company to answer
Refer the matter to another SEC unit or government agency
Begin an investigation or enforcement action
Suggest mediation, conciliation, or another dispute-resolution process
Require a more formal complaint if adjudication is necessary

Reply through the ticket thread rather than opening several duplicate complaints about the same incident.

There is no single guaranteed resolution period. Review time depends on whether the company can be identified, the completeness of the evidence, the need to obtain a response, and whether the case requires enforcement or formal adjudication. The iMessage ticket itself does not display a separate fee for opening a complaint, although a later formal proceeding may have additional filing or documentary requirements.

Sample Complaint Narrative

On [date], I applied for a loan through [name of app or website], which represented itself as being operated by [company name, if known]. The platform advertised a loan of ₱[amount], but only ₱[amount] was credited to my [bank or e-wallet] account. It required payment of ₱[amount] by [due date], including charges that were not clearly disclosed before disbursement.

Beginning on [date], collectors using [phone numbers, usernames, or account names] sent messages threatening [brief description]. They also contacted [number] persons from my phone contacts who were not guarantors and disclosed information about the alleged loan. Copies of the messages, call logs, loan terms, disbursement record, and payment receipts are attached.

I complained to the company on [date] through [channel], but [describe response or lack of response]. I respectfully request the SEC to verify the entity’s authority to operate, investigate its disclosures, charges, online lending platform, collection practices, and processing of personal data, and impose or direct the relief allowed by law.

When to File Complaints with Other Agencies

National Privacy Commission

File a separate complaint with the National Privacy Commission when the lender:

Accessed or copied contacts without proper justification
Contacted people who were not guarantors
Posted personal information online
Used photos, identification documents, or messages to shame you
Refused to correct or delete unlawfully processed information

The NPC’s complaint-filing page provides the current Complaint-Affidavit form. The form generally must be completed, printed, notarized, and supported by a valid ID and evidence.

The complainant should normally show that the respondent was first contacted in writing or explain why prior contact was unsafe, impossible, or inappropriate. A complaint may be dismissed if required evidence is not attached. Filing may be made personally, by courier, or through the method stated on the NPC’s official page. (National Privacy Commission)

NBI, PNP, or DICT

Do not wait for the SEC process when the conduct involves immediate threats, fraudulent transfers, extortion, identity theft, or impersonation.

The March 2026 government advisory identifies the following reporting channels:

DICT Cyber Hotline: 1326@dict.gov.ph
NBI Cybercrime Division: ccd@nbi.gov.ph; (02) 8523-8231 to 38
PNP Anti-Cybercrime Group: acg@pnp.gov.ph; onlinecims.ocs@gmail.com; (02) 8723-0401 local 7491
SEC FINLEND: SEC iMessage or hotline 1-4732 (1-4SEC)

Possible criminal laws include Article 315 of the Revised Penal Code on estafa, Republic Act No. 10175 or the Cybercrime Prevention Act, and other laws on threats, identity misuse, unauthorized access, or fraudulent financial accounts. The applicable charge depends on the evidence and circumstances.

What the SEC Complaint Can and Cannot Do

An SEC complaint can lead to:

Verification of the company’s authority
Investigation of an unregistered lending operation
Orders requiring compliance
Administrative fines or penalties
Suspension or revocation of authority
Cease-and-desist action
Mediation or conciliation
Adjudication of qualifying civil claims
Referral to another regulator or law-enforcement agency

However, filing a harassment or privacy complaint does not automatically cancel a valid loan principal. A borrower may dispute undisclosed interest, unlawful charges, false computations, or fraudulent transactions while still acknowledging any amount legitimately received.

Likewise, filing with the SEC does not automatically freeze a scammer’s account or recover transferred money. Banks and e-wallet providers must be notified immediately when a fraudulent transfer has occurred.

Common Mistakes That Weaken an SEC Complaint

Deleting the app too soon

Uninstalling the app may erase account details, permissions, loan terms, and evidence identifying its operator. Preserve these first.

Filing only cropped screenshots

A screenshot showing only an insulting phrase may not identify the sender, date, platform, or connection to the loan. Include the full conversation and surrounding context.

Using only the app’s brand name

The app may be operated by a corporation with a different name. Check the privacy notice, loan agreement, payment recipient, app-store developer, and collection messages.

Paying another fee to “recover” the first payment

Scammers often claim that a final payment is needed to release the loan, refund, or frozen account. Further payment usually increases the loss.

Assuming every collection message creates a criminal case

A collector cannot create an arrest warrant by text message. Warrants are issued by courts in proper criminal proceedings. Failure to pay an ordinary civil debt does not automatically result in arrest.

Publicly posting IDs and account details

Public posts may expose the borrower to identity theft. Submit evidence through official channels and redact unnecessary personal information from public copies.

Opening multiple duplicate tickets

Duplicate submissions can separate the evidence and slow review. Use the existing iMessage ticket to send additional files and explanations.

Special Situations

The borrower is outside the Philippines

A Filipino or foreign borrower abroad may still use SEC iMessage if the complaint concerns a Philippine lending or financing company.

An initial iMessage report generally does not require an apostilled affidavit. Do not spend on authentication unless the SEC specifically requires a formally verified document. If a notarized affidavit is later required, ask whether the SEC will accept:

Notarization before a Philippine embassy or consulate
Local notarization followed by an apostille
Another form of remote or electronic verification allowed by the SEC

Documents in a language other than English or Filipino may require a certified translation.

The lender harassed someone who was not the borrower

A relative, co-worker, friend, or employer whose personal data was used may file a complaint concerning their own privacy rights.

The person should preserve:

The collector’s number or account
The complete message
Date and time received
Information disclosed about the borrower
Proof that the person was not a guarantor
Any threats or public posts

The app has disappeared

The complaint can still proceed. Include archived screenshots, messages, receipts, app-store links, account numbers, advertisements, and information from other victims. The SEC and law-enforcement agencies may use these details to identify the operator.

The lender used a legitimate company’s name

Attach evidence showing where the name or logo appeared. Also report the impersonation to the legitimate company through its official website, not through contact details provided by the suspected scammer.

Frequently Asked Questions

Can I complain to the SEC even if I still owe money?

Yes. A borrower may have a valid unpaid balance while the lender is separately violating rules on disclosures, collection, interest, or privacy. The complaint should distinguish the amount genuinely received from the charges or practices being disputed.

Can an online lender contact everyone in my phone?

Generally, no. The March 2026 government advisory states that lenders may not contact people in the borrower’s phone contacts for collection purposes unless they are properly designated guarantors. A character reference is not automatically a guarantor.

Can an online lending app threaten me with arrest?

A lender may pursue lawful collection remedies, but it cannot issue an arrest warrant or guarantee that the borrower will be jailed. Threatening automatic arrest for an ordinary unpaid debt is misleading and may be evidence of unfair collection.

Does SEC registration mean the lender is legitimate?

Not necessarily. An ordinary SEC registration establishes corporate existence but does not by itself authorize lending. A lending or financing company generally needs a Certificate of Authority, and its online lending platform must comply with SEC requirements.

What if I paid a processing fee but never received the loan?

Notify the bank or e-wallet immediately, preserve the transfer details, and report the matter to the SEC and law enforcement. Include the advertisement, conversation, recipient account, payment receipt, and all later fee demands.

Can the SEC order a refund?

Republic Act No. 11765 gives the SEC adjudicatory authority over qualifying civil claims involving payment or reimbursement of up to ₱10 million. Whether the SEC can order reimbursement in a particular case depends on its jurisdiction, the nature of the claim, and the evidence.

Should I block the collector?

Preserve the messages, numbers, call logs, and account details first. You may then block the sender for safety. Blocking one number does not prevent you from filing a complaint.

How long does an SEC online lending complaint take?

There is no fixed period applicable to every complaint. Straightforward inquiries may be handled faster than cases involving unidentified operators, multiple victims, formal investigation, or adjudication. Promptly answer requests for additional information through the iMessage ticket.

Do I need a lawyer to file through SEC iMessage?

A lawyer is not required merely to open an iMessage complaint. The facts, evidence, and requested relief should nevertheless be organized carefully. More formal adjudicatory proceedings may involve additional procedural requirements.

Can I file both an SEC complaint and an NPC complaint?

Yes. The SEC addresses lending, financing, disclosure, and collection violations, while the NPC addresses unlawful processing of personal data. The same incident may justify complaints with both agencies.

Key Takeaways

File complaints against lending and financing companies through SEC iMessage.
Verify the operator through Check with SEC, but remember that corporate registration alone is not authority to lend.
Preserve the app, loan terms, messages, permissions, receipts, account numbers, and transaction records before deleting or blocking anything.
Do not pay advance “release,” “verification,” or “unlocking” fees.
Online lenders generally may not contact non-guarantors in the borrower’s phone contacts for debt collection.
File a separate NPC complaint for unlawful use or disclosure of personal data.
Report threats, fraud, identity theft, and fraudulent transfers immediately to law enforcement and the bank or e-wallet involved.
A complaint about harassment or unlawful charges does not automatically erase any valid amount genuinely borrowed.