If an online lending app is harassing you, posting your information, threatening your contacts, or collecting loans without showing a valid SEC authority, you can file a complaint with the Securities and Exchange Commission through its official iMessage ticketing system. The SEC complaint is not just a “report”; if supported by screenshots, app details, payment records, and the company’s claimed identity, it can help the SEC investigate whether the app is operating without authority, violating online lending rules, or using unfair debt collection practices.

What Makes a Lending App “Unlicensed” in the Philippines?

A lending app is usually considered suspicious or potentially unlicensed when it cannot clearly show the legal entity behind it and the authority allowing that entity to lend money in the Philippines.

Under Republic Act No. 9474, or the Lending Company Regulation Act of 2007, a lending company is a corporation engaged in granting loans from its own capital funds or from funds sourced from not more than nineteen persons. The SEC’s implementing rules define a Certificate of Authority as the certificate issued by the SEC allowing a lending company to engage in the lending business. (Lawphil)

This matters because SEC registration alone is not enough. A corporation may be registered with the SEC as a company, but still lack the separate authority required to operate as a lending or financing company.

A legitimate online lending platform should normally disclose:

The full corporate name, not just the app name
SEC registration number
Certificate of Authority number
Business address and contact details
Clear loan terms, finance charges, interest, penalties, and deductions
Privacy notice and consent mechanism
Identification of the actual lender, not just the app developer or marketing brand

SEC Memorandum Circular No. 19, Series of 2019 specifically deals with disclosure requirements in advertisements of financing and lending companies and reporting of online lending platforms. (SEC Appointment System) The SEC, NPC, and DICT also treat online lending platforms as mobile apps, websites, or fintech-enabled systems through which lending or financing companies make loan products available.

Legal Basis for Complaining to the SEC

Republic Act No. 9474: Lending Company Regulation Act

RA 9474 requires lending companies to operate under SEC regulation. The implementing rules state that a lending company must be established as a stock corporation and must secure authority from the SEC before engaging in lending operations. (Lawphil)

The same rules provide that a person who engages in the business of a lending company without a valid subsisting SEC authority may face a fine of ₱10,000 to ₱50,000, imprisonment of six months to ten years, or both, at the court’s discretion. (Lawphil)

Republic Act No. 8556: Financing Company Act

Some apps operate through financing companies instead of lending companies. RA 8556, the Financing Company Act of 1998, regulates financing and leasing companies and aims to prevent acts prejudicial to public interest. Its implementing rules also require a Certificate of Authority to operate as a financing company. (Lawphil)

SEC Memorandum Circular No. 18, Series of 2019: Unfair Debt Collection Practices

SEC Memorandum Circular No. 18, Series of 2019 prohibits unfair debt collection practices by financing companies, lending companies, and third-party service providers hired by them. It covers abusive collection conduct such as threats, violence, use of criminal means, obscene or profane language, false representations, disclosure of borrower information, and contact at unreasonable hours.

A very common online lending app complaint is contact-list harassment. MC 18 treats it as an unfair collection practice when a collector contacts persons in the borrower’s contact list other than those named as guarantors or co-makers, even if the borrower supposedly gave app permission.

Penalties under MC 18 include fines, and for serious or repeated violations, possible suspension or revocation of the authority to operate.

Republic Act No. 11765: Financial Products and Services Consumer Protection Act

RA 11765, or the Financial Products and Services Consumer Protection Act, protects financial consumers by recognizing rights such as fair treatment, disclosure and transparency, data privacy, protection against fraud and misuse, and timely handling and redress of complaints. (Supreme Court E-Library)

This law is useful when the app misleads borrowers about the true cost of the loan, hides charges, uses dark-pattern consent screens, or refuses to provide a meaningful complaint channel.

Republic Act No. 10173: Data Privacy Act

Many lending app abuses involve personal data. The Data Privacy Act of 2012 protects personal information in government and private information systems. (National Privacy Commission)

The 2026 joint advisory of the DICT, NPC, and SEC states that unnecessary app permissions, excessive processing of personal data, and unauthorized access to borrowers’ contact lists are prohibited. It also states that contacting people in the borrower’s contact list other than guarantors is prohibited.

Truth in Lending Act and Excessive Charges

Republic Act No. 3765, the Truth in Lending Act, requires disclosure of finance charges in credit transactions. (Lawphil) If the app advertises “0% interest” but deducts service fees, processing fees, platform fees, or penalties that make the real cost much higher, include this in the SEC complaint.

Philippine courts may also strike down or reduce interest and penalty stipulations that are excessive or unconscionable. In a 2024 Supreme Court public information release, the Court reiterated that a 3% monthly rate, or 36% per annum, may be excessive and unconscionable depending on the circumstances, especially when imposed on top of other interest and penalties. (Supreme Court of the Philippines)

Where to File a SEC Complaint Against an Online Lending App

The current official online channel is the SEC iMessage ticketing system. The SEC describes iMessage as its official web-based platform for public inquiries, complaints, incidents, and requests. It generates an electronic ticket for each submission and allows users to track the ticket status. (imessage.sec.gov.ph)

For unfair debt collection practices, the 2026 DICT-NPC-SEC advisory directs the public to file with the Securities and Exchange Commission, Financing and Lending Companies Department (FINLEND) through the SEC iMessage system.

Before You File: Preserve Evidence Properly

Do this before uninstalling the app, changing numbers, or deleting messages.

Evidence checklist

Evidence	Why it matters
App name and screenshots of the app page	Shows the exact platform complained of
Google Play/App Store link or APK source	Helps identify whether the app is still publicly distributed
Corporate name, SEC registration number, or CA number shown in the app	Helps SEC verify if the app is registered or falsely using a company name
Loan agreement, disclosure statement, repayment schedule	Shows hidden fees, interest, deductions, penalties, and due dates
Screenshots of threats, insults, or public shaming	Supports unfair collection practice allegations
Call logs and SMS logs	Shows frequency, time, and numbers used by collectors
Messages sent to relatives, employer, co-workers, or contacts	Important for contact-list harassment and privacy violations
Proof of payments	Helps clarify whether the app is collecting amounts already paid
Screenshots of permissions requested by the app	Supports privacy and excessive data processing issues
Your written timeline	Helps the SEC officer quickly understand what happened

Use screenshots that show the date, time, sender, and full message. If the harassment happened on Facebook, Messenger, Viber, WhatsApp, Telegram, or SMS, capture the profile, number, group chat name, and message content. Save copies in cloud storage or email them to yourself.

Step-by-Step: How to File the SEC Complaint

1. Identify the correct respondent

Try to determine whether you are complaining against:

The app name only, such as “Fast Cash,” “Peso Loan,” or similar brand
The corporate lender behind the app
A financing company or lending company
A collection agency or third-party collector
Unknown persons using multiple mobile numbers

If the app does not disclose a corporate name or CA number, say so clearly. Do not guess. Write: “The app does not disclose any SEC registration number or Certificate of Authority in the app interface or loan documents available to me.”

2. Prepare a short chronology

Write the facts in order:

Date you downloaded or used the app
Amount applied for
Amount actually received after deductions
Due date and amount demanded
Whether you paid anything
When the harassment or threats started
Who was contacted aside from you
What information was disclosed
Whether the app showed SEC registration or CA details
What relief you are asking the SEC to consider, such as investigation, verification of authority, action against unfair collection, or takedown coordination

Keep it factual. Avoid insults. A clear timeline is more useful than a long emotional narrative.

3. Open the SEC iMessage system

Go to the SEC iMessage platform and choose Open a New Ticket. The SEC user guide says users should access iMessage, open a new ticket, agree to the privacy policy, sign in with eSECURE, choose the needed service, fill out the form, and create the ticket. (imessage.sec.gov.ph)

The relevant service in the iMessage service list is under the Financing and Lending Companies Department, where “Complaints on Financing and Lending Companies” appears under the Monitoring and Compliance Division. (imessage.sec.gov.ph)

4. Use a clear subject line

A good subject line helps routing. Examples:

“Complaint Against Unlicensed Online Lending App – Contact List Harassment”
“Request for SEC Action Against Online Lending App Without CA Number”
“Unfair Debt Collection and Data Privacy Abuse by Lending App”
“Online Lending App Using Threats and Contacting Employer”

5. State the violations in plain language

You do not need to sound like a lawyer. Say what happened and connect it to the rule.

Example:

I am filing this complaint against the online lending app [APP NAME]. The app does not show any corporate name, SEC registration number, or Certificate of Authority. After I borrowed ₱5,000 and received only ₱3,900 after deductions, its collectors demanded ₱7,500 after seven days. They sent threatening messages, contacted people in my phone contacts who are not guarantors, and disclosed that I allegedly owe money. I am attaching screenshots of the messages, call logs, app interface, loan terms, and proof of payment.

6. Upload attachments

Attach your evidence in organized files. If possible, rename them clearly:

01-App-Profile-Screenshot.pdf
02-Loan-Terms-and-Disclosure.pdf
03-Threatening-Messages.pdf
04-Messages-to-Contacts.pdf
05-Payment-Proof.pdf
06-Call-Logs.pdf

If you cannot upload everything due to file size limits, upload the strongest evidence first and state that additional screenshots are available upon request.

7. Save your ticket number

After filing, the iMessage system displays the created ticket and assigns it to the responsible SEC department. Open tickets are being processed, while closed tickets may mean resolved or requiring your action depending on the ticket status. (imessage.sec.gov.ph)

Keep the ticket number. You will need it for follow-ups.

8. Reply promptly if SEC asks for clarification

If SEC asks for more details, use the Post a Reply section. The SEC user guide allows users to input a reply, upload a file if needed, and post the reply to notify the agent handling the ticket.

Sample SEC Complaint Narrative

Use this as a practical structure, not as a rigid form:

I respectfully request the SEC to investigate the online lending application [APP NAME], which appears to be operating without proper authority or without clearly disclosing its corporate identity, SEC registration number, and Certificate of Authority.

On [DATE], I downloaded the app from [SOURCE]. I applied for a loan of ₱[AMOUNT], but only ₱[NET AMOUNT] was released to me after deductions. The app required repayment of ₱[AMOUNT] by [DATE]. The app did not clearly show the complete lender name, SEC registration number, Certificate of Authority number, or full disclosure of finance charges before the loan was released.

Beginning [DATE], collectors using the numbers/accounts listed in the attached screenshots sent threatening, insulting, and harassing messages. They also contacted persons in my phone contacts who were not my guarantors or co-makers, including [RELATIONSHIP ONLY, e.g., employer, sibling, friend], and disclosed that I allegedly had a debt. Copies of the messages, call logs, app screenshots, and payment proof are attached.

I request verification of whether this app and the company behind it are authorized to operate as a lending or financing company in the Philippines, and I request appropriate action for possible unlicensed lending, unfair debt collection practices, misleading disclosure of loan charges, and misuse of personal data.

When to File with Other Agencies Too

A SEC complaint is important, but some conduct may need a parallel complaint with another agency.

Problem	Agency to consider	Why
Unlicensed lending app, hidden CA number, abusive collection by lending/financing company	SEC FINLEND	SEC regulates lending and financing companies
Contact-list harvesting, debt shaming, misuse of photos or contacts	National Privacy Commission	NPC handles Data Privacy Act issues
Hacking, identity theft, cyber threats, scams	NBI Cybercrime Division or PNP Anti-Cybercrime Group	These may involve cybercrime or criminal investigation
Threats of physical harm, extortion, stalking	Local police, PNP ACG, NBI	Immediate safety and criminal law concerns
Fake investment or “loan first, pay advance fee” scam	SEC, NBI, PNP	May involve fraud or investment scam indicators

The 2026 DICT-NPC-SEC advisory specifically lists SEC FINLEND for unfair debt collection practices, and DICT Cyber Hotline, NBI Cybercrime Division, and PNP Anti-Cybercrime Group for other harassment, threats, frauds, or scams.

Common Mistakes That Weaken SEC Complaints

1. Filing only a rant without evidence

A complaint saying “They are scammers, please shut them down” is weaker than a complaint with screenshots, loan terms, app details, phone numbers, and a timeline.

2. Confusing the app name with the company name

Many lending apps use brand names. The SEC investigates legal entities. If you only know the app name, state that the company name was not disclosed and attach screenshots showing the lack of disclosure.

3. Deleting the app too early

The app may contain the loan agreement, privacy policy, repayment screen, collector messages, disclosure statement, and lender identity. Capture everything first.

4. Paying through informal channels without proof

If a collector tells you to pay to a personal GCash number, bank account, or crypto wallet, screenshot the instruction before paying. Keep the receipt. Mention if the account name does not match the lender.

5. Ignoring “small” violations

Small details matter: calls before 6:00 a.m. or after 10:00 p.m., repeated threats, disclosure to contacts, false claim of criminal case, fake barangay/police threat, and public shaming can all support a pattern of unfair collection. MC 18 treats unreasonable or inconvenient contact times and deceptive collection means as unfair practices.

6. Thinking non-payment removes all your rights

Even if you owe money, collectors cannot use threats, public shaming, false criminal accusations, or contact-list harassment. A lender may pursue lawful collection, but it must do so in good faith and within legal limits.

Practical Timelines and What to Expect

There is no single guaranteed timeline for every SEC lending app complaint. In practice, timing depends on the completeness of your evidence, whether the company is identifiable, whether the app is already under monitoring, and whether other agencies must be involved.

Typical stages:

Stage	What usually happens
Filing	You submit the ticket and receive a reference number
Initial routing	The complaint is assigned to the relevant SEC department
Evaluation	SEC checks whether the matter involves a financing/lending company or online lending platform
Clarification	SEC may ask for additional documents, screenshots, company details, or proof
Monitoring or enforcement	SEC may consolidate complaints, issue directives, require explanation, impose fines, suspend/revoke authority, or coordinate further action depending on findings
Parallel action	If privacy or cybercrime issues are present, NPC, NBI, PNP, or DICT channels may also be relevant

If your complaint involves immediate danger, do not wait for administrative processing. Threats of physical harm, extortion, or stalking should be reported to law enforcement.

Special Notes for OFWs, Foreigners, and Filipinos Abroad

You can still file through the SEC iMessage system even if you are outside the Philippines, as long as you can access your email, phone, evidence, and the online ticketing platform.

For overseas complainants:

Use your current email and reachable mobile number.
State your country and time zone.
Attach screenshots showing Philippine numbers, app pages, payment channels, and messages.
If the SEC or another agency later requires a sworn affidavit executed abroad, check whether consular notarization or apostille is needed. Philippine embassies can notarize private documents such as affidavits and powers of attorney, while apostille rules may apply depending on where the document was executed and where it will be used. (Philippine Embassy)

Foreigners in the Philippines may also file complaints if they borrowed from, were harassed by, or had personal data misused by an online lending app operating in the Philippines. The key is not citizenship; the key is whether the complained-of conduct falls under Philippine regulatory, privacy, consumer, or criminal law.

Frequently Asked Questions

How do I know if a lending app is registered with the SEC?

Check whether the app clearly shows its corporate name, SEC registration number, and Certificate of Authority number. A legitimate app should not hide behind only a brand name. You may also use SEC online services, SEC lists, or file an iMessage inquiry requesting verification of the lender’s authority.

Can I file a SEC complaint if I still owe the loan?

Yes. Owing money does not give a lender or collector the right to harass you, threaten you, contact unrelated people in your phonebook, or shame you publicly. Your complaint should be honest about the loan but firm about the abusive or unlawful conduct.

What if the app contacted my employer or family?

Include screenshots or statements showing who was contacted, when, what was said, and whether that person was a guarantor or co-maker. Contacting people in your contact list other than named guarantors or co-makers is treated as an unfair debt collection practice under SEC rules.

What if the app has no SEC registration number or Certificate of Authority?

State that clearly in your complaint and attach screenshots of the app pages, loan agreement, advertisements, and profile pages where the required information should have appeared. Ask the SEC to verify whether the app or company is authorized.

Can the SEC erase my debt?

A SEC complaint is mainly regulatory and administrative. The SEC can investigate violations and impose sanctions where warranted. Disputes over the exact amount owed, invalid interest, damages, or refund may require separate legal action, negotiation, or court proceedings depending on the facts.

Should I also file with the National Privacy Commission?

File with the NPC when the app accessed, used, shared, or exposed your personal data, contacts, photos, employer information, or social media information without proper legal basis. The NPC has a formal complaint process for privacy violations. (National Privacy Commission)

Is it legal for a lending app to access my contact list?

Access must be necessary, proportionate, and for a legitimate purpose. The 2026 DICT-NPC-SEC advisory says unnecessary permissions, excessive processing, and unbridled contact-list processing are prohibited. It also states that OLPs may only access contact lists for limited purposes such as selecting character references or guarantors, or proportional metadata where necessary.

What if collectors threaten to file a criminal case for non-payment?

Non-payment of debt by itself is generally a civil matter, not automatically a crime. However, fraud, identity theft, falsified documents, or other criminal acts are different. If a collector falsely threatens imprisonment just to scare you into paying, include that in your SEC complaint as a possible deceptive or abusive collection practice.

Can I complain anonymously?

A detailed, evidence-backed complaint with your contact details is usually more useful because SEC may need clarification, documents, and proof of your transaction. If you fear retaliation, explain that in the complaint and limit unnecessary personal details in attachments, but provide enough information for the SEC to verify the facts.

What should I do if the app keeps harassing me after I file?

Continue preserving evidence. Reply to your SEC ticket with new screenshots and dates. If threats escalate to physical harm, extortion, identity theft, fake criminal accusations, or account hacking, report separately to the NBI Cybercrime Division, PNP Anti-Cybercrime Group, or local police.

Key Takeaways

An online lending app should disclose the real lending or financing company, SEC registration number, and Certificate of Authority.
A corporation’s SEC registration is different from authority to operate as a lending or financing company.
File SEC complaints through the SEC iMessage system under the Financing and Lending Companies Department complaint service.
Strong evidence includes screenshots, loan terms, payment proof, call logs, contact-list harassment, and app permission screens.
SEC rules prohibit unfair debt collection practices, including threats, insults, public shaming, false representations, and contacting non-guarantor contacts.
Data privacy abuse may also be reported to the National Privacy Commission.
Threats, scams, identity theft, and cyber harassment may require parallel reporting to NBI, PNP Anti-Cybercrime Group, or other law enforcement agencies.
Even if you owe money, collectors must use lawful, fair, and proportionate collection methods.