If a lending app is threatening you, collecting from your contacts, using a fake SEC certificate, or refusing to identify the real company behind the loan, your first practical step is to document everything and file a report with the Securities and Exchange Commission (SEC). In the Philippines, online lending apps are not allowed to operate just because they are downloadable from Google Play, the App Store, Facebook, or a website. The company behind the app must be properly registered and authorized, and the app itself must be traceable to a lawful lending or financing entity.

This guide explains how to check whether a lending app is unregistered or unrecorded, what laws apply, what evidence to prepare, how to file an SEC complaint through the proper channel, and when you should also report the matter to the National Privacy Commission (NPC), PNP Anti-Cybercrime Group, NBI Cybercrime Division, your bank, or your e-wallet provider.

What “Unregistered Lending App” Means in the Philippines

Many borrowers use the phrase “unregistered lending app” to mean any suspicious or abusive loan app. Legally, there are several different situations:

Situation	What it means	Why it matters
The company is not SEC-registered at all	The business entity cannot be found in SEC records	Possible illegal lending, scam, or fake entity
The company is SEC-registered but has no Certificate of Authority	The corporation exists, but is not authorized to operate as a lending or financing company	Corporate registration alone is not enough
The company is licensed, but the app is not recorded with the SEC	A real lending or financing company may be operating an unreported or unrecorded online lending platform	This may violate SEC rules on online lending platforms
The app uses the name of a legitimate lender	A scammer may be pretending to be a real SEC-registered company	Often seen in fake loan approvals and advance-fee scams
The app is run from abroad but targets Philippine borrowers	The operator may be outside the Philippines but collecting from Filipino borrowers or contacts	SEC, NPC, PNP, NBI, app stores, banks, and e-wallets may all become relevant

Under Republic Act No. 9474, the Lending Company Regulation Act of 2007, a lending company must be a corporation and cannot conduct lending business unless it has authority from the SEC. Section 12 of the same law provides penalties for engaging in the business of a lending company without a valid authority to operate.

The key point is this: “SEC registered” does not automatically mean “allowed to lend money.” A company may be registered as an ordinary corporation but still lack the required authority to operate as a lending company or financing company.

Legal Basis for Complaints Against Illegal Lending Apps

Several Philippine laws and SEC issuances may apply, depending on what the app did.

Lending Company Regulation Act: RA 9474

RA 9474 regulates lending companies in the Philippines. It requires lending companies to be corporations and to secure SEC authority before conducting lending operations.

It also gives the SEC regulatory and supervisory powers, including the authority to:

require reports from lending companies;
exercise visitorial powers;
issue implementing rules;
impose administrative sanctions;
suspend or revoke a lending company’s authority to operate; and
impose fines for violations.

For an unregistered or unauthorized lending app, RA 9474 is usually the central law.

Financing Company Act: RA 8556

Some online credit providers operate as financing companies rather than lending companies. These are also under SEC supervision. If the app describes itself as a financing company, consumer finance provider, installment credit provider, buy-now-pay-later provider, or similar credit facility, the SEC may still be the correct regulator, depending on the structure.

Truth in Lending Act: RA 3765

The Truth in Lending Act, RA 3765, requires creditors to disclose the true cost of credit. This includes finance charges and the percentage rate before the credit transaction is completed.

This matters because many lending apps advertise “low interest” or “0% interest” but deduct large “processing fees,” “service fees,” “platform fees,” or “membership fees” before releasing the loan. In practice, a borrower may apply for ₱5,000, receive only ₱3,500, and still be asked to repay ₱5,000 or more within a few days. The issue is not just the label used by the app. The issue is the real cost of borrowing.

SEC Memorandum Circular No. 18, Series of 2019

SEC Memorandum Circular No. 18, s.2019 prohibits unfair debt collection practices by financing companies, lending companies, and third-party service providers acting for them.

Prohibited acts include, among others:

threats of violence or other criminal means;
threats to take action that cannot legally be taken;
use of obscenities, insults, or profane language that abuses the borrower;
disclosure or publication of borrowers’ names and personal information for allegedly refusing to pay debts;
communicating false information about the debt;
false representation or deceptive collection methods;
contacting borrowers at unreasonable or inconvenient times; and
contacting people in the borrower’s contact list other than those named as guarantors or co-makers.

This circular is especially important in online lending harassment cases.

SEC Memorandum Circular No. 19, Series of 2019

SEC MC No. 19, s.2019 requires financing and lending companies to disclose their corporate name, SEC registration number, and Certificate of Authority number in advertisements and online lending platforms. It also requires online lending platforms to be reported to the SEC.

This is why a lending app with no clear company name, no Certificate of Authority number, no Philippine address, and no proper disclosure is a serious red flag.

Data Privacy Act: RA 10173 and NPC Rules

The Data Privacy Act of 2012, RA 10173, protects personal information. Lending apps commonly violate privacy rules when they harvest contacts, access photos, scrape phone data, publicly shame borrowers, or message relatives, employers, co-workers, and friends who are not guarantors.

The NPC issued NPC Circular No. 20-01, later amended by NPC Circular No. 2022-02, specifically on personal data processing for loan-related transactions.

A 2026 joint advisory of the DICT, NPC, and SEC also reminded the public that online lending platforms cannot require unnecessary app permissions, cannot process contact lists excessively, and cannot contact people in the borrower’s contact list other than actual guarantors. The advisory identifies the SEC iMessage Portal as the channel for unfair debt collection complaints and points victims of threats, frauds, scams, and cyber harassment to DICT, NBI, and PNP cybercrime channels.

Cybercrime Prevention Act: RA 10175 and Revised Penal Code

If the app or collector threatens you online, posts defamatory statements, creates fake images, impersonates you, hacks your account, or sends threats through messaging apps, the conduct may also involve the Cybercrime Prevention Act of 2012, RA 10175.

Depending on the facts, possible criminal issues may include:

grave threats under Article 282 of the Revised Penal Code;
grave coercions under Article 286;
unjust vexation under Article 287;
swindling or estafa under Article 315;
libel under Articles 353 and 355, if defamatory statements are made; and
cyber libel or other cyber-related offenses under RA 10175.

The SEC handles regulatory action against lending and financing companies. Criminal prosecution is handled separately through law enforcement and the prosecutor’s office.

Step 1: Verify Whether the Lending App Is Legitimate

Before filing, gather basic identity information about the app. The SEC and other agencies will act faster when you can identify the respondent clearly.

Check the app, contract, and disclosures

Look for:

app name;
developer name in Google Play or the App Store;
company name in the terms and conditions;
company name in the loan agreement or promissory note;
SEC registration number;
Certificate of Authority number;
business address;
customer service email or phone number;
privacy policy;
payment account names;
GCash, Maya, bank, or remittance recipient names; and
screenshots of advertisements or Facebook pages.

Do not rely only on the app’s logo. Many illegal apps use names similar to legitimate lenders.

Check SEC records and lists

Use official SEC channels where available:

SEC iMessage Portal for reports and complaints;
SEC Check App on Google Play;
SEC lists of lending companies, financing companies, and recorded online lending platforms on the official SEC website.

When checking, compare the exact legal name. “ABC Lending Corporation” is not the same as “ABC Cash Loan App” unless the documents clearly connect them.

Understand the three-layer check

A legitimate online lending operation should generally pass three checks:

Corporate existence — Is the company registered with the SEC?
Authority to lend or finance — Does it have a Certificate of Authority to operate as a lending or financing company?
Recorded online platform — Is the specific app, website, or platform connected to that authorized company?

If one of these is missing, your complaint should explain exactly what you could not verify.

Step 2: Preserve Evidence Before the App Deletes or Changes It

Many illegal lending apps disappear, change names, or remove pages after complaints. Save evidence immediately.

Prepare a folder with:

Evidence	Why it helps
Screenshots of the app page	Shows app name, developer, downloads, reviews, and description
Screenshots of loan approval	Shows amount approved, amount released, term, charges, and due date
Loan agreement or promissory note	Identifies the contracting party and loan terms
Disclosure statement	Shows whether charges were properly disclosed
Payment receipts	Shows how much you received and paid
Bank/e-wallet transaction records	Helps trace recipient accounts
Collection messages	Shows threats, insults, false statements, or harassment
Call logs	Shows frequency and timing of collection calls
Messages sent to contacts	Proves third-party harassment or privacy violations
App permission screenshots	Shows access to contacts, camera, location, storage, or photos
Fake SEC certificate or permit	Supports misrepresentation or fraud
Police blotter, if any	Helps if threats or extortion occurred

For screenshots, include the date and time if possible. Do not crop too aggressively. Full-screen screenshots are often more useful because they show the sender, number, app, timestamp, and message sequence.

If relatives, friends, co-workers, or employers were contacted, ask them to save screenshots from their own phones. Their evidence is stronger than your second-hand narration.

Step 3: Decide What Type of Complaint You Are Filing

For lending apps, one incident can involve several legal issues. File with the agency that matches the problem.

Problem	Main office to approach	Practical result
App is unregistered, unrecorded, or has no authority to lend	SEC Financing and Lending Companies Department / SEC iMessage	Regulatory investigation, advisory, sanctions, referral
Abusive debt collection by lending or financing company	SEC	Fine, suspension, revocation, compliance order
App accessed contacts or messaged non-guarantors	NPC	Data privacy investigation and possible penalties
Threats, extortion, fake nude photos, public shaming, account hacking	PNP Anti-Cybercrime Group or NBI Cybercrime Division	Criminal investigation
Money was sent to a bank or e-wallet scam account	Bank, e-wallet provider, then BSP if supervised entity issue remains unresolved	Account tracing, hold request, dispute record
Fake ads, impersonation, advance-fee scam	SEC, PNP/NBI cybercrime, app store, platform report	Takedown and enforcement action

For SEC purposes, focus your complaint on facts showing that the app is operating as a lending or financing business without proper authority, using an unrecorded online lending platform, or violating SEC collection and disclosure rules.

Step 4: File the SEC Complaint Through the Proper Channel

The current practical channel for lending and financing complaints is the SEC iMessage Portal. The portal allows the public to submit a ticket, report an issue, or file a complaint.

How to file through SEC iMessage

Go to the SEC iMessage Portal.
Choose the option to open a new ticket.
Select the relevant SEC department or service category for lending and financing complaints, if available.
Enter your full name, email address, and contact details.
Identify the respondent:
- app name;
- company name, if known;
- developer name;
- website or app store link;
- payment recipient name;
- collector names or numbers, if known.
Write a clear chronological narration.
Upload supporting evidence.
Submit the ticket and save the ticket number.
Check your email and the portal for updates or requests for additional documents.

What to write in the complaint

Use a simple chronology. Avoid emotional exaggeration, but include every important fact.

A strong complaint usually answers these questions:

When did you download or access the app?
What loan amount did you apply for?
How much was actually released?
What fees or deductions were imposed?
What repayment amount and due date were demanded?
What company name appeared in the contract or app?
Did the app disclose an SEC registration number and Certificate of Authority number?
Did you find the company or app in SEC records?
What harassment, threats, or misrepresentations happened?
Were your contacts messaged?
Did the app use your personal data without authority?
What documents are attached?

A concise subject line helps. For example:

Complaint against [App Name] / [Company Name if known] for unregistered online lending, harassment, and misuse of contacts

If you are reporting a fake or unverified app and do not know the company name, say so clearly:

The app does not disclose the legal name of the lender, Certificate of Authority number, or Philippine business address despite offering loans to the public.

Step 5: Attach the Right Documents

At minimum, prepare:

valid government ID;
your contact details;
complaint narrative;
screenshots of the app and loan transaction;
loan agreement, if available;
disclosure statement, if available;
proof of amount received;
proof of payments made;
collection messages and call logs;
screenshots from contacted relatives or friends;
proof that you searched SEC records, if available;
app store link or website link;
privacy policy or terms and conditions; and
fake SEC certificate, if the app used one.

If filing from abroad, you may use your passport or foreign ID for identification. If the SEC, NPC, police, prosecutor, or a court later requires a sworn affidavit, overseas execution may require notarization before a Philippine consulate or notarization abroad with an apostille, depending on the document’s intended use.

For an initial SEC report through iMessage, focus on submitting clear evidence quickly. Formal notarized affidavits may become more important if the matter proceeds to criminal complaint, administrative adjudication, or court action.

Step 6: File Parallel Complaints When Needed

An SEC complaint is important, but it may not solve every problem.

File with the NPC if contacts were accessed or messaged

If the app harvested your phone contacts, messaged your relatives, contacted your employer, publicly shared your personal information, or used your photos, file a separate complaint with the National Privacy Commission.

Mention RA 10173, NPC Circular No. 20-01, and NPC Circular No. 2022-02. Attach evidence that the app accessed or used personal data beyond what was necessary for the loan transaction.

Report threats and extortion to PNP or NBI

If collectors threatened violence, threatened to post your face or private information, demanded money through intimidation, impersonated government officials, sent fake warrants, or used edited images, report to cybercrime authorities.

The 2026 DICT-NPC-SEC advisory identifies these channels for cyber harassment, threats, fraud, and scams:

DICT Cyber Hotline: 1326@dict.gov.ph
NBI Cybercrime Division: ccd@nbi.gov.ph
PNP Anti-Cybercrime Group: acg@pnp.gov.ph

For serious threats, also consider a police blotter at your local police station. A blotter is not the same as a criminal case, but it creates an official record.

Report payment channels immediately

If you paid through GCash, Maya, a bank transfer, remittance center, or QR code, report the transaction to the provider immediately. Ask for a reference number. Give the recipient account name, number, amount, date, and screenshots.

This matters because illegal lending apps often recycle payment accounts. A prompt report can help preserve transaction records.

What the SEC Can and Cannot Do

It is important to have realistic expectations.

The SEC can investigate lending and financing companies, issue advisories, impose administrative fines, suspend or revoke authority to operate, order compliance, and refer matters to law enforcement or prosecutors when appropriate.

The SEC may not be able to immediately:

erase your debt;
order instant deletion of all app data;
award moral damages like a court;
arrest collectors;
force an overseas scammer to appear immediately; or
stop all messages overnight.

For damages, contract disputes, or criminal liability, other proceedings may be needed. For privacy violations, the NPC is usually the more direct forum. For threats and extortion, law enforcement is necessary.

Does Filing an SEC Complaint Cancel the Loan?

Not automatically.

Under Article 1159 of the Civil Code, obligations arising from contracts generally have the force of law between the parties. However, this does not mean every charge demanded by a lending app is valid.

A borrower may still have to return the principal actually received, but excessive, hidden, undisclosed, or unconscionable interest and charges may be questioned. Philippine courts have repeatedly reduced unconscionable interest rates. In Medel v. Court of Appeals, the Supreme Court treated a 5.5% monthly interest rate as excessive, iniquitous, unconscionable, and exorbitant.

For borrowers, the practical approach is:

keep proof of the amount actually received;
keep proof of every payment made;
do not agree to inflated balances without a written breakdown;
do not pay “advance fees” to release a loan;
demand the legal name of the lender and loan documents; and
separate the issue of debt repayment from harassment, privacy abuse, and illegal lending operations.

Common Mistakes When Filing SEC Complaints Against Lending Apps

Mistake 1: Complaining only about “harassment” without naming the app

The SEC needs details. Identify the app, company, developer, payment accounts, collector numbers, and links.

Mistake 2: Deleting the app too soon

Uninstalling may reduce further access, but first preserve screenshots of loan terms, permissions, messages, account details, and documents. If you already deleted the app, check email, SMS, app store history, downloads, and payment records.

Mistake 3: Assuming “SEC registration” means legal lending authority

A certificate of incorporation only proves that a corporation exists. Lending to the public requires proper authority.

Mistake 4: Ignoring the app store link

The app store page can show the developer, package name, reviews, download count, screenshots, and update history. Save it.

Mistake 5: Not filing with the NPC when contacts are abused

The SEC handles lending regulation. The NPC handles data privacy. If your contacts were scraped or messaged, file with both.

Mistake 6: Paying a “settlement” without receipts

If you decide to pay any amount, pay only through traceable channels and save receipts. Avoid sending money to personal accounts without written confirmation of what the payment covers.

Mistake 7: Believing fake legal threats

Collectors may send fake subpoenas, fake warrants, fake barangay notices, or fake court documents. A real criminal case, civil case, subpoena, or court order has formal details and comes from the proper authority, not from a random collector threatening you on Messenger or SMS.

Practical Timeline and Costs

Item	Usual practical expectation
SEC iMessage submission	Can be done online anytime
Acknowledgment or ticket update	Often depends on volume and completeness of documents
SEC request for additional documents	Possible if respondent identity or evidence is unclear
Regulatory investigation	Can take weeks to months, especially for multiple apps or anonymous operators
NPC complaint	May require a more formal complaint and evidence of personal data misuse
Police/NBI cybercrime complaint	Timelines vary depending on evidence, account tracing, and subpoenas
Filing fee for online SEC report	Usually none for ordinary complaint submission
Possible costs	Notarization, printing, scanning, courier, authenticated SEC document requests, legal representation if a formal case is pursued

The most common bottleneck is not the law itself. It is incomplete evidence. A complaint with clear screenshots, transaction records, app links, and a readable timeline is easier to act on than a general statement saying “this app is harassing me.”

Special Notes for OFWs and Foreigners

OFWs and foreigners can file reports online if the lending app targets them or uses Philippine lending channels. The main challenge is documentation.

If you are abroad:

use an active email address you can monitor;
include your Philippine mobile number, if still active;
include your foreign number as an alternate contact;
attach passport or valid ID if requested;
preserve all app, email, SMS, and e-wallet records;
indicate your current country and time zone; and
be prepared for notarization, consular acknowledgment, or apostille if a sworn affidavit is later required.

Foreigners should also check whether the loan transaction identifies a Philippine company or merely an offshore app. If the app has no Philippine entity but uses Philippine payment channels, report both the app and the payment recipients.

Frequently Asked Questions

How do I report an unregistered lending app to the SEC Philippines?

File through the SEC iMessage Portal. Provide the app name, company name if known, app store link, screenshots, loan agreement, payment records, collection messages, and a clear explanation that the app appears unregistered, unauthorized, unrecorded, or falsely using another company’s identity.

What if I do not know the company behind the lending app?

You can still file a report. State that the app does not disclose the legal lender, SEC registration number, Certificate of Authority number, or Philippine address. Attach screenshots of the app, developer name, privacy policy, payment account, messages, and app store listing.

Can the SEC stop a lending app from harassing me?

The SEC can investigate, penalize, suspend, revoke, or refer matters involving lending and financing companies. For immediate threats, extortion, fake images, or cyber harassment, also report to PNP Anti-Cybercrime Group or NBI Cybercrime Division. For misuse of contacts and personal data, file with the NPC.

Is a lending app legal if it is on Google Play or the App Store?

Not necessarily. App store availability does not prove SEC authority. Always check whether the company has SEC registration, a Certificate of Authority to operate as a lending or financing company, and a recorded online lending platform.

Can a lending app contact my contacts if I gave app permission?

Generally, lending and financing companies cannot use your contact list for debt collection against people who are not guarantors or co-makers. Consent must also be specific, informed, and proportionate. Excessive contact list harvesting and messaging non-guarantors may violate SEC rules and the Data Privacy Act.

Can I go to jail for not paying an online loan?

Non-payment of debt by itself is generally a civil matter. However, fraud, bouncing checks, falsified documents, or other criminal acts may create separate issues. Collectors cannot lawfully threaten jail merely to force payment if there is no proper criminal basis.

Should I still pay an unregistered lending app?

Do not ignore legitimate obligations, but do not blindly pay inflated or unexplained amounts. Keep proof of the amount actually received and payments already made. Ask for a written breakdown. Report illegal lending, harassment, undisclosed charges, and privacy violations to the proper agencies.

What if the app is pretending to be a legitimate company?

Take screenshots showing the fake app, fake certificate, fake Facebook page, or fake approval message. Report it to the SEC, the real company being impersonated, the app store or platform, and cybercrime authorities if money was taken or threats were made.

Do I need a lawyer to file an SEC complaint?

For an initial SEC report through iMessage, many borrowers file on their own using screenshots and a written narration. A lawyer may become more useful if you need to file a formal affidavit, respond to a demand letter, pursue damages, defend a collection case, or file criminal complaints.

How long does an SEC complaint against a lending app take?

There is no single fixed timeline. Simple reports may receive a ticket or acknowledgment first, while investigations involving multiple apps, hidden operators, fake identities, or cybercrime coordination can take weeks or months. Complete evidence and clear respondent details help avoid delay.

Key Takeaways

A lending app is not automatically legal just because it is downloadable or claims to be “SEC registered.”
The company behind the app must have proper SEC authority to operate as a lending or financing company.
For online lending, check the specific app or platform, not just the company name.
File SEC complaints through the SEC iMessage Portal and attach organized evidence.
Report contact list abuse and public shaming to the NPC because these involve data privacy rights.
Report threats, extortion, impersonation, fake documents, and cyber harassment to PNP Anti-Cybercrime Group or NBI Cybercrime Division.
Filing an SEC complaint does not automatically cancel a loan, but hidden charges, abusive collection, illegal lending, and unconscionable interest can be challenged.
The strongest complaints include screenshots, loan documents, payment records, app links, collector messages, and a clear timeline.