If an online lending app is threatening you, messaging your contacts, posting your debt, adding unclear fees, or collecting through abusive calls and texts, the Securities and Exchange Commission (SEC) is often the correct government office to approach in the Philippines. The SEC regulates lending companies, financing companies, and registered or recorded online lending platforms, while other agencies such as the National Privacy Commission (NPC), NBI, PNP, or Bangko Sentral ng Pilipinas (BSP) may also be involved depending on the violation. This guide explains when to file a complaint with the SEC, what evidence to prepare, how to use the SEC iMessage portal, and what to expect after filing.

When Should You File a Complaint With the SEC Against an Online Lending Company?

You should consider filing a complaint with the SEC when the online lending company, financing company, or online lending platform appears to be violating SEC rules, consumer protection laws, or lending regulations.

Common reasons include:

The lender or collector is threatening violence, criminal cases, arrest, public shaming, or harm to your reputation
The app contacted your family, friends, employer, or phone contacts even though they are not guarantors or co-makers
The company disclosed your debt to other people
The collector used insulting, obscene, or abusive language
The app charged hidden fees, unclear interest, or deductions not properly disclosed before the loan
The company operates under an app name that is not clearly connected to a registered lending or financing company
The lender appears to have no SEC Certificate of Authority
The app harvested or misused your contact list, photos, messages, or other personal data
The lender refuses to provide a clear statement of account or loan breakdown
The company continues abusive collection even after you dispute the account

In March 2026, the DICT, NPC, and SEC issued a public advisory recognizing reports of online lending platform harassment, intimidation, public shaming, and unlawful use of personal data. The advisory specifically directed reports of unfair debt collection by lending and financing companies to the SEC Financing and Lending Companies Department through the SEC iMessage portal.

Which Agency Should Handle Your Complaint?

Not every online loan problem goes only to the SEC. Many cases involve overlapping issues.

Problem	Primary office to consider	Why
Abusive collection by a lending company, financing company, or online lending app	SEC	SEC regulates lending and financing companies and online lending platforms
Contacting your phone contacts, employer, or relatives without proper authority	SEC and NPC	SEC handles unfair debt collection; NPC handles misuse of personal data
Hidden interest, unclear fees, or no disclosure statement	SEC	This may violate Truth in Lending and SEC disclosure rules
Threats, extortion, harassment, fraud, or identity misuse	SEC, NBI Cybercrime Division, PNP Anti-Cybercrime Group, prosecutor’s office	Criminal conduct may require law enforcement or prosecution
Bank, credit card, e-wallet, or BSP-supervised financial institution issue	BSP	BSP regulates banks and many non-bank financial service providers
Cooperative lending issue	Cooperative Development Authority (CDA)	Cooperatives are generally not SEC lending companies
Pure dispute over whether you still owe money	Company complaint desk, SEC if regulated, and possibly court	SEC may investigate regulatory violations, but ordinary debt disputes may still involve civil remedies

The practical rule is simple: file with the SEC if the respondent is a lending company, financing company, or online lending platform regulated by the SEC. File with the NPC as well if the problem involves personal data misuse, such as harvesting contacts or using your personal information to shame or pressure you.

Legal Basis: Your Rights Against Abusive Online Lending Practices

Lending companies must be authorized by the SEC

Under the Lending Company Regulation Act of 2007, Republic Act No. 9474, a lending company must be a corporation and cannot operate as a lending company unless it has authority from the SEC. The SEC has power to regulate and supervise lending companies, require reports, examine records, and impose administrative sanctions such as suspension, revocation, and fines. (Supreme Court E-Library)

This matters because many borrowers only know the app name. The legal respondent may be a corporation behind the app. When preparing your complaint, try to identify both:

The app name
The company name
SEC registration number, if shown
Certificate of Authority number, if shown
Registered address
Email address, phone number, website, or app store listing
Names or numbers used by collectors

If the app does not appear in SEC lists of registered lending companies, financing companies, or recorded online lending platforms, mention that in your complaint and attach screenshots of your verification attempt. SEC responses to public inquiries have directed the public to check the SEC website lists for lending companies, financing companies, and online lending platforms. (www.foi.gov.ph)

Borrowers have a right to clear disclosure of loan costs

The Truth in Lending Act, Republic Act No. 3765, requires creditors to disclose finance charges and the true cost of credit. Before the loan is consummated, the creditor must give a clear written statement showing items such as the amount financed, finance charge, and effective interest rate. (Lawphil)

For online loans, this is important because many borrowers receive less than the advertised loan amount after deductions for “processing fees,” “service fees,” “platform fees,” or “membership fees.” A complaint is stronger if you show:

Amount you applied for
Amount actually released to your bank, GCash, Maya, or other account
Fees deducted before release
Due date
Total amount demanded
Screenshots of the loan offer and disclosure page
Any missing or unclear disclosure statement

SEC rules prohibit unfair debt collection practices

The SEC has issued rules against unfair debt collection practices by financing companies and lending companies. SEC Memorandum Circular No. 18, series of 2019, covers prohibited collection conduct, while SEC Memorandum Circular No. 19, series of 2019, deals with advertisements and reporting of online lending platforms. (SEC Appointment System)

Unfair practices commonly include:

Threats of violence or harm
Threats of criminal action that cannot legally be taken
Obscene, insulting, or profane language
Publishing or disclosing a borrower’s name or personal details to shame them
False or deceptive statements
Contacting people in the borrower’s contact list who are not guarantors or co-makers
Collection calls or messages at unreasonable hours

The 2026 DICT-NPC-SEC advisory also clarified that a lending company, financing company, online lending platform, or anyone acting for them may contact a guarantor for debt collection, but contacting people in the borrower’s contact list who are not guarantors is prohibited. It also emphasized that a character reference is different from a guarantor, and a guarantor must separately and expressly consent to assume responsibility for the loan.

Financial consumers have rights under RA 11765

The Financial Products and Services Consumer Protection Act, Republic Act No. 11765, recognizes financial consumer rights such as fair treatment, disclosure and transparency, protection from fraud and misuse, data privacy, and timely handling of complaints. It also gives financial regulators, including the SEC, powers to enforce consumer protection rules, order consumer redress, and address abusive collection or recovery practices. (Supreme Court E-Library)

This law is useful in complaints because it frames your issue not only as a private debt problem, but also as a financial consumer protection issue.

Data privacy violations may also be reported to the NPC

The Data Privacy Act of 2012, Republic Act No. 10173, protects personal information and requires personal data processing to follow principles such as transparency, legitimate purpose, and proportionality. The NPC has repeatedly warned online lenders against excessive permissions and contact-list harvesting. It has stated that online lenders should not use personal data for unfair debt collection and has acted on complaints involving apps that contacted third persons, falsely treated them as co-makers, or used personal data for harassment and public shaming. (National Privacy Commission) (National Privacy Commission)

For many online lending cases, the practical approach is to file:

SEC complaint for unfair debt collection, unauthorized lending, hidden fees, or violations by the lending company
NPC complaint for misuse of personal data, contact harvesting, privacy violations, or unauthorized disclosure
NBI/PNP report for threats, scams, extortion, hacking, identity misuse, or serious harassment

Before Filing: What to Do First

1. Identify the real company behind the app

Do not file only against “the app” if you can avoid it. Many online lending apps use brand names that differ from the registered company name.

Look for the company name in:

Loan agreement
Disclosure statement
Privacy policy
App profile or app store listing
SMS or email notices
Collection messages
Payment instructions
Receipts
Company website
SEC registration or Certificate of Authority details shown in the app

If the app shows several names, include all of them and explain how they appeared.

2. Preserve evidence before deleting anything

Before uninstalling the app, changing phones, blocking numbers, or deleting chats, save your evidence.

Good evidence includes:

Screenshots of the loan offer, approved amount, released amount, fees, interest, and due date
Screenshots of all abusive messages
Call logs showing date, time, and number
Voice messages, if any
Names, phone numbers, and account names of collectors
Screenshots from relatives, friends, co-workers, or employers who were contacted
Payment receipts
Bank, GCash, Maya, remittance, or e-wallet transaction records
App permission screenshots, especially contact list, camera, gallery, SMS, or location access
Emails sent to customer service and their replies
Your written demand for them to stop contacting non-guarantors

Organize the files by date. A clear file name such as 2026-06-10 collector threat SMS.png is more useful than Screenshot_1245.png.

3. Try the company’s complaint channel if safe and practical

Many SEC complaints become stronger if you can show that you first tried to resolve the matter with the company and received no proper response. This is sometimes called exhaustion of remedies, meaning you tried the available complaint process before escalating.

You can send a short email or in-app complaint asking the company to:

Provide a full statement of account
Explain all charges and deductions
Stop contacting people who are not guarantors or co-makers
Identify the collection agency or collector handling the account
Preserve your data and stop unauthorized disclosure
Confirm the company’s SEC registration and Certificate of Authority

Do not engage in long arguments with abusive collectors. Keep your message calm and factual.

Documents and Evidence to Prepare

What to prepare	Why it matters
Government ID or passport	Establishes your identity as complainant
Full name, address, email, and mobile number	Needed for SEC communication
App name and company name	Identifies the respondent
SEC registration number or Certificate of Authority, if available	Helps SEC verify the company
Loan agreement or disclosure statement	Shows the legal terms of the loan
Screenshots of loan offer and release details	Shows amount borrowed, amount received, charges, and due date
Payment receipts	Shows what you already paid
Collection messages and call logs	Proves harassment, threats, timing, or repeated contact
Screenshots from contacts who were messaged	Proves contact-list abuse or third-party disclosure
App permissions and privacy notice	Supports data privacy and excessive permission issues
Complaint sent to company and reply, if any	Shows prior attempt to resolve
Short timeline of events	Helps SEC understand the case quickly

For overseas Filipinos and foreigners, a passport or foreign government ID may be used to identify yourself. If the SEC, NPC, prosecutor, or court later requires a sworn affidavit, you may need notarization. If executed abroad, notarization may be done through a Philippine Embassy or Consulate, or through a local notary with apostille where applicable.

Step-by-Step: How to File a Complaint With the SEC Against an Online Lending Company

1. Go to the SEC iMessage portal

The SEC uses its iMessage portal for receiving and tracking concerns, complaints, and requests. The portal allows users to open a new ticket and check ticket status. (Securities and Exchange Commission)

The SEC iMessage user guide explains that users can access the portal, click Open a New Ticket, agree to the privacy policy, sign in using eSECURE, choose the service needed, fill out the form, and create the ticket. Once submitted, the system generates a ticket and assigns it to the responsible department. (Securities and Exchange Commission)

2. Sign in or create your eSECURE account

The portal requires sign-in through eSECURE. Use an email address and mobile number that you can regularly access, because SEC may send updates or require additional documents.

If you are filing from abroad, use an email address that will remain active. Avoid using a temporary email or phone number.

3. Choose the correct SEC department and service

For complaints against lending companies, financing companies, or online lending platforms, choose the service under the Financing and Lending Companies Department. The SEC iMessage service list includes Complaints on Financing and Lending Companies under that department. (Securities and Exchange Commission)

Choosing the wrong department may delay routing. If your issue is about a lending app’s collection conduct, hidden charges, or authority to operate, the Financing and Lending Companies Department is usually the right starting point.

4. Identify the respondent clearly

In the complaint form or ticket details, identify the respondent as completely as possible.

Include:

App name
Company name
Business name used in messages
Website or app store link, if available
Registered address, if shown
Email addresses and phone numbers used by the lender
Collector names and numbers
Payment account names
Whether the company claims to be SEC-registered
Whether you found or did not find it in SEC lists

If you are unsure of the company name, say so and explain where each name appeared. For example:

“The app is called Fast Peso Loan. The privacy policy mentions ABC Lending Corporation. The GCash payment account is under XYZ Collection Services. I am not sure which entity owns the app, so I am providing all names and screenshots.”

5. Write a short, chronological statement of facts

SEC staff will understand your complaint faster if you write it in timeline form.

Use this structure:

Date you downloaded or used the app
Amount applied for
Amount approved
Amount actually released
Fees deducted
Due date and total amount demanded
What happened when the account became due or disputed
Specific collection acts complained of
Names and numbers of collectors, if known
People contacted by the app and whether they were guarantors
Your attempt to complain to the company
What you are asking the SEC to do

Avoid writing only emotional statements such as “They are harassing me.” Instead, give details:

“On June 10, 2026 at 8:42 p.m., number 09xx sent me a message saying they would post my photo online.”
“On June 11, 2026, my employer received a text saying I was a scammer.”
“My sister was contacted even though she never signed as guarantor.”
“The app deducted ₱1,200 from a ₱5,000 loan but did not clearly disclose the deduction before release.”

6. State the violations you believe occurred

You do not need to write like a lawyer, but it helps to label the issue clearly. You may say the complaint involves:

Unfair debt collection
Contacting non-guarantors or non-co-makers
Public shaming or disclosure of debt
Threats, intimidation, or abusive language
Undisclosed finance charges or unclear loan cost
Misleading app or advertisement
Possible operation without SEC authority
Unauthorized or excessive use of personal data

7. Ask for specific, realistic action

You may request the SEC to:

Investigate the lending company, financing company, app, collectors, and third-party collection agency
Direct the respondent to stop contacting persons who are not guarantors or co-makers
Require the respondent to provide a proper statement of account and loan disclosure
Require the respondent to explain its authority to operate
Review whether the app or company violated SEC lending, financing, disclosure, or collection rules
Impose appropriate administrative sanctions if violations are found
Refer or coordinate the matter with other agencies when appropriate

Be careful with requests like “cancel my debt immediately.” The SEC may investigate unlawful charges, unfair practices, and consumer redress, but a complaint does not automatically erase a valid loan.

8. Upload your evidence

Upload clear copies of your evidence. If the portal has file size limits, combine related screenshots into PDF files or organize them into smaller batches.

A practical upload set may look like this:

File	Suggested contents
`01 Complaint narrative.pdf`	Your timeline and requested action
`02 Loan documents.pdf`	Contract, disclosure, screenshots of loan terms
`03 Payments.pdf`	Receipts, bank or e-wallet proof
`04 Harassment screenshots.pdf`	Abusive texts, chats, call logs
`05 Contacted third persons.pdf`	Screenshots from relatives, friends, employer
`06 Company identity.pdf`	App profile, privacy policy, company names, SEC verification screenshots

If you are complaining against several apps or several corporations, file separate complaints where possible. Mixing multiple companies in one confusing narrative can slow down review.

9. Submit the ticket and save your reference number

After submission, save your ticket number, screenshots of the filed ticket, and confirmation email if any.

The iMessage guide states that users can check ticket status through the portal. Open tickets are still being processed, while closed tickets may indicate that action has been completed or that the responsible division has closed the ticket after processing. Users may also post replies and upload files in the ticket thread. (Securities and Exchange Commission)

10. Monitor your ticket and respond quickly

Check your email and the iMessage portal regularly. SEC may ask for:

Clearer copies of screenshots
More details about the company
Proof that you transacted with the respondent
Proof that the contacted person was not a guarantor
A formal complaint form
A sworn statement or notarized affidavit
Additional documents for evaluation

If SEC asks for additional documents, reply within the given period. A complaint can be delayed or closed if the complainant does not respond.

Sample SEC Complaint Narrative

You can adapt this format to your facts:

I am filing a complaint against [name of app] and [company name, if known] for unfair debt collection, unauthorized contact of third persons, and unclear loan charges.

On [date], I borrowed ₱[amount] through the app. The approved amount was ₱[amount], but only ₱[amount] was released to my [bank/e-wallet] because ₱[amount] was deducted as [processing/service/platform] fees. I was not clearly given a full disclosure of the finance charges before the loan was released.

On [date], collectors using numbers [numbers] began sending threatening and abusive messages. They said [briefly quote threat]. They also contacted [name/relationship], who was only a contact/reference and never agreed to be a guarantor or co-maker.

I asked the company to stop contacting people who are not guarantors and to provide a statement of account, but [no response/response was inadequate]. I am attaching screenshots of the loan details, payment records, collection messages, and messages received by third persons.

I respectfully request the SEC to investigate the respondent company, its online lending platform, and its collectors or collection agency; require them to stop contacting non-guarantors; require a proper loan breakdown; and impose appropriate action if violations are found.

What Happens After You File With the SEC?

After filing, the SEC may review the complaint, route it to the proper division, ask for more documents, require the company to comment, evaluate whether the facts show regulatory violations, or take appropriate administrative action.

Depending on the case, possible results include:

The company is required to respond to the complaint
The company corrects account information or collection handling
The company stops contacting non-guarantors
The matter is considered for investigation or enforcement
The SEC imposes administrative sanctions if violations are established
The matter is referred to another agency if the main issue is data privacy, cybercrime, fraud, or another non-SEC matter

Timelines vary. A simple ticket may receive an initial response faster, while complaints requiring investigation, company comment, or coordination with other agencies may take weeks or months. Delays commonly happen when the respondent company is difficult to identify, the complaint lacks evidence, or the borrower does not reply to SEC requests for clarification.

Important Practical Warnings

A character reference is not automatically a guarantor

Many apps ask for “references” during sign-up. A reference is usually just someone who may verify your identity or contact details. A guarantor or co-maker is different because that person agrees to answer for the debt.

The 2026 DICT-NPC-SEC advisory states that online lending platforms must have separate interfaces for character references and guarantors, and that guarantors must expressly consent to assume responsibility.

If your friend, relative, employer, or co-worker did not sign or expressly consent as guarantor, say this clearly in your complaint.

Do not rely only on screenshots without dates

Screenshots are helpful, but they are stronger when they show:

Date
Time
Phone number or account name
Complete message
Relationship of the contacted person to you
Context of the threat or disclosure

If someone else was contacted, ask that person to send you screenshots showing the sender number and date. A short written statement from that person may also help if SEC asks for more proof.

Be careful with call recordings

Philippine law on recording private communications can be sensitive because of the Anti-Wiretapping Act, Republic Act No. 4200. A safer approach is to preserve call logs, voicemails, text messages, chat messages, and written statements from people who received collection calls or threats. If a recording already exists, do not edit or circulate it publicly; submit it only if a proper authority requests it or if you are advised that it can be legally used.

An SEC complaint does not automatically stop lawful collection

Filing a complaint does not automatically mean the debt disappears or that the company can never collect. What the SEC can address is whether the company violated lending, financing, disclosure, consumer protection, or collection rules.

If you admit that part of the debt is valid but dispute abusive conduct or unlawful charges, say so clearly:

“I am not refusing to settle a valid obligation. I am disputing the unclear charges and the unlawful collection practices.”

This makes your complaint more credible and focused.

Do not ignore court papers or official notices

Some collectors threaten “estafa,” arrest, barangay blotter, immigration hold, or employer reporting to scare borrowers. Non-payment of a loan is usually a civil matter unless there are separate facts showing fraud or another offense. However, if you receive real court papers, a subpoena, or an official notice from a government office, do not ignore it. An SEC complaint is not a substitute for responding to a court case or prosecutor’s subpoena.

Advance fees before loan release are a red flag

Be cautious if a supposed lender asks you to pay an advance fee to release a loan, increase your credit limit, or “unlock” funds. Public advisories have warned that legitimate lenders generally do not ask borrowers to pay advance fees before releasing a loan; fees are typically deducted from loan proceeds or disclosed as part of the loan terms. (Philippine Information Agency)

Common Mistakes That Can Weaken an SEC Complaint

Mistake	Why it hurts your complaint	Better approach
Filing against only the app nickname	SEC may need the legal company name	Include app name, company name, payment account, website, and all identifying details
No screenshots or proof	The complaint becomes hard to verify	Attach dated screenshots, receipts, call logs, and messages
Mixing many apps in one complaint	Facts become confusing	File separate complaints for separate companies
Focusing only on anger or embarrassment	SEC needs facts and violations	Write a timeline with dates, numbers, and specific acts
Deleting the app immediately	You may lose loan terms and disclosure pages	Save screenshots and documents first
Not checking the SEC lists	You may miss whether the company is authorized	Attach verification screenshots or explain that you could not find the company
Ignoring SEC follow-up	Ticket may be closed or delayed	Monitor iMessage and email regularly

Special Notes for OFWs, Filipinos Abroad, and Foreigners

OFWs and Filipinos abroad can still file complaints when the lending company, financing company, borrower, transaction, or affected contacts are connected to the Philippines. Foreigners may also file if they dealt with a Philippine online lending company or if their personal data or contacts in the Philippines were affected.

Practical tips:

Use your passport, Philippine ID, or foreign government ID
State your current country and Philippine contact details, if any
Explain whether the loan was released to a Philippine bank, e-wallet, or remittance channel
Include screenshots from Philippine contacts who were messaged
Use email and the SEC iMessage portal for filing and follow-up
If a sworn affidavit is required, ask whether consular notarization or apostille will be accepted

Data privacy issues may still be relevant even if the complainant is abroad, especially where Philippine citizens, Philippine residents, or Philippine-linked processing are involved under the Data Privacy Act framework. (Supreme Court E-Library)

Frequently Asked Questions

Where do I file a complaint against an online lending app in the Philippines?

For unfair debt collection, hidden loan charges, unauthorized lending, or abusive conduct by a lending or financing company, file with the SEC through the SEC iMessage portal and choose the Financing and Lending Companies Department service for complaints. For misuse of personal data, also consider filing with the NPC. For threats, fraud, extortion, or cybercrime, report to the NBI Cybercrime Division or PNP Anti-Cybercrime Group as well.

Can the SEC stop an online lending app from contacting my contacts?

The SEC can investigate unfair debt collection practices and take regulatory action against lending or financing companies and their collectors. The 2026 advisory states that lenders and persons acting for them may contact guarantors for debt collection, but contacting people in the borrower’s contact list who are not guarantors is prohibited.

Is it illegal for an online lending app to message my family or employer?

It can be unlawful or improper if your family member, friend, employer, or co-worker is not a guarantor or co-maker and the message is used to collect, shame, threaten, or disclose your debt. This may involve unfair debt collection under SEC rules and possible data privacy violations under the Data Privacy Act.

Do I need a lawyer to file an SEC complaint?

For a basic complaint through the SEC iMessage portal, many borrowers file on their own. What matters most is a clear timeline and strong evidence. However, if SEC later requires a sworn statement, formal pleading, or if the matter develops into a court, prosecutor, or criminal case, more formal documentation may be needed.

Does the complaint need to be notarized?

An online ticket and uploaded complaint narrative may not always require notarization at the initial stage. But if the SEC, NPC, prosecutor, or court asks for an affidavit or formal complaint, notarization may be required. NPC formal complaints, for example, use a formal complaint process that requires a completed and notarized complaint form. (National Privacy Commission)

What if the online lending app is not registered with the SEC?

Mention this in your complaint and attach proof of your verification attempt. Under RA 9474, a lending company cannot conduct lending business without SEC authority. The SEC may treat possible unauthorized lending as a regulatory or enforcement concern. (Supreme Court E-Library)

Can the SEC cancel my online loan?

Not automatically. The SEC may investigate violations, require explanations, order appropriate consumer redress in proper cases, and impose sanctions. But filing a complaint does not automatically cancel a valid loan. If you are disputing unlawful charges, unclear fees, or abusive collection, state exactly what you dispute and provide evidence.

How long does an SEC complaint take?

There is no single fixed timeline. Filing the iMessage ticket can be done online once your account and documents are ready. Initial review may take days or weeks, while matters requiring investigation, company response, or coordination with other agencies may take longer. You can check the ticket status and reply through the iMessage portal. (Securities and Exchange Commission)

Should I uninstall the lending app after filing a complaint?

Save your evidence first. Before uninstalling, take screenshots of the loan agreement, disclosure page, fees, due date, privacy permissions, messages, and company details. After preserving evidence, you may review and limit unnecessary app permissions on your phone, especially contact list, camera, gallery, SMS, and location permissions.

What should I do if a collector threatens arrest or an estafa case?

Save the message, number, date, and time. Include it in your SEC complaint if the collector is acting for a lending or financing company. If the threat involves extortion, identity misuse, cyber harassment, or serious intimidation, report it to law enforcement as well. The 2026 DICT-NPC-SEC advisory identifies the DICT cyber hotline, NBI Cybercrime Division, and PNP Anti-Cybercrime Group as agencies for harassment, threats, fraud, and scam-related reports.

Key Takeaways

The SEC is the main agency for complaints against SEC-regulated lending companies, financing companies, and online lending platforms.
File through the SEC iMessage portal and choose the complaint service under the Financing and Lending Companies Department.
Strong complaints include dates, screenshots, loan documents, payment receipts, collector numbers, and proof that non-guarantor contacts were messaged.
A character reference is not automatically a guarantor; guarantors must separately and expressly consent.
Threats, public shaming, obscene language, undisclosed charges, and contacting non-guarantor phone contacts may support an SEC complaint.
Data privacy issues should also be reported to the NPC, while threats, scams, extortion, or cybercrime may require NBI, PNP, or prosecutor action.
Filing with the SEC does not automatically cancel a valid debt, but it can trigger regulatory review, consumer protection action, and possible sanctions against abusive or unauthorized lenders.