If a lending app is threatening you, contacting your relatives or workmates, hiding its company name, or demanding charges that were never clearly disclosed, you can file a complaint with the Securities and Exchange Commission. The SEC is the main agency that supervises lending companies and financing companies in the Philippines, including online lending platforms. A strong complaint is not just an angry message saying “scam app.” It should show who operated the app, why you believe it is unregistered or unauthorized, what happened to you, and what evidence supports your report.

This guide explains what an unregistered lending app is, what laws protect borrowers, how to prepare your evidence, how to file through the SEC iMessage portal, when to involve the National Privacy Commission or cybercrime authorities, and what practical results you can realistically expect.

What Counts as an Unregistered Lending App in the Philippines?

An online lending app may look legitimate because it is on Google Play, the App Store, Facebook, TikTok, or a website. That does not automatically mean it is allowed to lend money in the Philippines.

In practice, a lending app may be “unregistered” or unauthorized in several ways:

The operator is not registered with the SEC as a corporation.
The operator is registered as a corporation but has no SEC Certificate of Authority to operate as a lending company or financing company.
The company has an SEC registration but the app or online lending platform is not properly disclosed or recorded with the SEC.
The app uses a fake, borrowed, expired, or misleading SEC registration number.
The app hides the real corporate name and only uses a trade name, app name, or collection agency name.

This distinction matters. A company’s ordinary SEC corporate registration only means it exists as a corporation. It does not automatically mean it can legally operate as a lending company.

Under Republic Act No. 9474, or the Lending Company Regulation Act of 2007, a lending company must be a corporation and cannot conduct lending business without authority from the SEC. The law also gives the SEC regulatory and supervisory powers over lending companies, including the power to impose sanctions and revoke authority to operate. (Supreme Court E-Library)

For financing companies, Republic Act No. 8556, or the Financing Company Act of 1998, similarly requires SEC authorization before a person or entity may hold itself out as a financing company. (Lawphil)

Common Red Flags of an Illegal or Unregistered Lending App

A lending app deserves closer checking if you notice any of these warning signs:

It does not show its corporate name.
It shows only an app name, brand name, or Facebook page.
It does not disclose an SEC registration number.
It does not disclose a Certificate of Authority number.
It refuses to identify the company behind the app.
It uses personal GCash, Maya, bank, or crypto accounts for payment.
It deducts large “processing fees” before releasing the loan.
It releases much less than the amount shown in the app.
It gives a very short repayment period, such as 7 days, with very high charges.
It threatens to post your photo, ID, or loan information online.
It contacts people in your phonebook who are not guarantors.
It claims you will be jailed simply for not paying.
It uses fake subpoenas, fake court orders, or fake barangay notices.
It refuses to issue an official statement of account or receipt.

The SEC has specifically addressed unfair debt collection practices by lending and financing companies. SEC Memorandum Circular No. 18, Series of 2019 prohibits practices such as threats of violence or criminal means, insults or profane language, false representations, public disclosure of borrowers’ personal information, and contacting people in the borrower’s contact list other than guarantors or co-makers.

Legal Basis for Filing an SEC Complaint

Lending Company Regulation Act: RA 9474

RA 9474 regulates lending companies in the Philippines. It provides that no lending company may conduct business unless it is granted authority to operate by the SEC. It also penalizes persons or entities that engage in lending without valid SEC authority, hold themselves out as lending companies without authority, or use names and representations that create the impression that they are authorized lenders. (Supreme Court E-Library)

This is the core legal basis when your complaint is that the app is not a licensed lending company.

Financing Company Act: RA 8556

Some apps are operated by companies that present themselves as financing companies rather than lending companies. RA 8556 covers financing companies that extend credit facilities through direct lending, discounting, factoring, leasing, or similar arrangements. It also prohibits unauthorized entities from holding themselves out as financing companies. (Lawphil)

This matters when the app, website, or messages use words like “financing,” “cash loan financing,” “installment financing,” “consumer financing,” or similar terms.

Truth in Lending Act: RA 3765

Republic Act No. 3765, or the Truth in Lending Act, requires creditors to clearly disclose the true cost of credit. Before a loan is consummated, the borrower should receive a clear written statement showing items such as the amount financed, finance charges, total amount to be paid, and the percentage that the finance charge bears to the total amount financed expressed as a simple annual rate. (Lawphil)

This law becomes important when the app shows one loan amount but releases a smaller amount, hides service fees, or makes the effective interest rate unclear.

Financial Products and Services Consumer Protection Act: RA 11765

Republic Act No. 11765, or the Financial Products and Services Consumer Protection Act of 2022, recognizes financial consumer rights such as fair treatment, disclosure and transparency, protection from fraud and misuse, data privacy, and timely handling of complaints. It also gives financial regulators, including the SEC, enforcement powers over covered financial service providers. (Supreme Court E-Library)

RA 11765 is especially relevant when the complaint involves abusive market conduct, misleading disclosures, excessive or unreasonable charges, or failure to provide a proper complaint-handling mechanism.

SEC Rules on Online Lending Platforms

SEC Memorandum Circular No. 19, Series of 2019 covers disclosure requirements in advertisements and online lending platforms. The SEC has required financing and lending companies to disclose information such as their corporate name, SEC registration number, Certificate of Authority number, and other required details in their online lending platforms and advertisements. (SEC Appointment System)

This is why screenshots of the app store page, app dashboard, loan agreement, ads, and website are important. They help show whether the app disclosed the legally required information.

Data Privacy and Harassment Concerns

The SEC, National Privacy Commission, and Department of Information and Communications Technology have warned against online lending practices involving harassment, intimidation, public shaming, and unlawful use of personal data. Their 2026 joint advisory emphasized that online lending platforms should not engage in unnecessary or disproportionate processing of personal data, including excessive access to contact lists. It also stated that contacting people in the borrower’s contact list, other than named guarantors, is prohibited.

If the app accessed your contacts, sent messages to your relatives, posted your identity, or used your photos without permission, your complaint may involve both SEC issues and data privacy issues.

What the SEC Can and Cannot Do

The SEC can investigate whether a lending or financing company is authorized, whether it violated SEC rules, and whether its collection practices are unfair or abusive. It can impose administrative sanctions such as fines, suspension, or revocation of authority to operate. The 2026 joint advisory also states that violations may result in SEC administrative sanctions, including fines and suspension or revocation of authority to operate.

However, the SEC is not a barangay, police station, or trial court. It generally does not act like a private debt negotiator for every borrower. It also may not instantly stop anonymous collectors, spoofed numbers, or fake Facebook accounts.

A good way to understand the SEC complaint process is this:

Issue	SEC can usually help with	Other office may also be needed
App has no SEC authority to lend	Yes	Possibly PNP/NBI if fraud or cybercrime is involved
App hides company name or CA number	Yes	App store/platform report may also help
Harassment by collectors	Yes, if tied to lending/financing company conduct	PNP/NBI if threats or extortion are serious
Unauthorized use of contacts/photos	Yes, if part of lending practice	National Privacy Commission
Fake subpoena, fake warrant, or threat of jail	Yes, as abusive collection evidence	PNP/NBI for possible criminal conduct
Dispute over exact balance	Possibly, if tied to disclosure or consumer protection issues	Court or proper dispute forum if purely civil
Collection case filed against you	SEC complaint may be relevant background	The court handling the case

Before Filing: Preserve Evidence First

Many borrowers delete the app immediately because they are scared. That is understandable, but it can make the complaint harder to prove. Before uninstalling, gather evidence safely.

Save the following:

Screenshots of the app name, logo, developer name, and app store listing.
The app’s package name, website, email address, phone number, and social media pages.
Screenshots showing the company name, SEC registration number, or Certificate of Authority number, if any.
Loan application page, approval page, loan agreement, disclosure statement, and repayment schedule.
Proof of the amount actually released to you.
Proof of deductions, processing fees, service fees, rollover fees, or penalties.
GCash, Maya, bank, remittance, or payment receipts.
Collection messages, SMS, emails, Viber, WhatsApp, Messenger, Telegram, or in-app messages.
Call logs showing date, time, and number.
Screenshots of threats, insults, public shaming, or fake legal notices.
Messages sent to your relatives, employer, friends, or contacts.
Names or numbers of collectors who contacted you.
Any proof that the app accessed your contacts, photos, camera, or location.

Keep screenshots in their original form when possible. Do not crop out the date, time, number, username, or app name. Put your files in folders by date so the story is easy to follow.

For calls, written evidence is usually safer than secret recordings. Preserve call logs and follow-up messages. If a collector threatens you by phone, immediately write down the date, time, number, exact words used, and names mentioned.

Step-by-Step: How to File an SEC Complaint Against an Unregistered Lending App

1. Identify the app and the company behind it

Start with the exact app name, but do not stop there. Many illegal apps change names quickly.

Look for:

App name as shown on your phone.
Developer name in Google Play or the App Store.
Website or landing page.
Customer service email.
Contact number.
Corporate name shown in the app.
SEC registration number.
Certificate of Authority number.
Privacy policy name.
Terms and conditions name.
Payment recipient names or account numbers.

If the app shows a company name, check whether it appears to be a lending company or financing company authorized by the SEC. If the app shows no company name at all, that itself is important evidence.

2. Organize your complaint timeline

Investigators need a clear story. Write the events in chronological order:

Date you downloaded or used the app.
Date you applied for the loan.
Amount you applied for.
Amount approved.
Amount actually received.
Fees or deductions.
Due date shown.
Amount demanded upon collection.
Dates and times of harassment or threats.
Names or numbers of collectors.
Contacts who were messaged or called.
Payments already made.

A timeline helps the SEC see whether the issue is unauthorized lending, unfair collection, misleading disclosure, or all of these.

3. Use the SEC iMessage portal

The SEC accepts public inquiries, complaints, incidents, and requests through its official SEC iMessage platform. The portal allows users to open a ticket and check ticket status. (imessage.sec.gov.ph)

For online lending complaints, the 2026 joint advisory specifically directs the public to report unfair debt collection practices involving financing and lending companies to the SEC Financing and Lending Companies Department through SEC iMessage. It also lists the SEC hotline 1-4732 or 1-4SEC.

When using the portal:

Choose the complaint or ticket category closest to lending, financing, online lending, or unfair debt collection.
Use your active email address and mobile number.
Provide the respondent’s exact app name and company name, if known.
If the company name is unknown, say so clearly and list all available identifying details.
Upload your evidence in organized files.
Save the ticket number after submission.

4. Write a specific complaint, not just a general accusation

A complaint that says “This app is illegal and harassing me” may not be enough.

A stronger complaint says:

The app appears to be unregistered or unauthorized because it does not disclose a valid SEC Certificate of Authority.
The app does not clearly identify the lending or financing company behind it.
The app failed to provide proper Truth in Lending disclosures.
The app contacted third persons who are not guarantors.
The app used threats, insults, public shaming, or fake legal documents.
The app accessed or used personal data beyond what was necessary for the loan.

Tie each point to evidence.

5. Attach documents in a clear order

Use file names that make sense, such as:

01-App-Store-Listing.pdf
02-Loan-Approval-Screenshot.pdf
03-Amount-Received-GCash.pdf
04-Collection-Threats-June-2026.pdf
05-Messages-to-Contacts.pdf
06-Payments-Made.pdf
07-No-SEC-CA-Shown.pdf

This makes your complaint easier to review than uploading 50 random screenshots.

6. State what you are asking the SEC to do

Your request should be practical and within the SEC’s role. You may ask the SEC to:

Verify whether the operator is a registered lending or financing company.
Verify whether it has a valid Certificate of Authority.
Investigate the online lending app for unauthorized lending.
Investigate unfair debt collection practices.
Require the company to identify its collectors or third-party service providers.
Direct the company to stop contacting non-guarantor contacts.
Review the charges, fees, and disclosures.
Impose appropriate administrative sanctions if violations are found.
Refer related privacy, cybercrime, or platform issues to the proper agency when appropriate.

7. Monitor the ticket and respond quickly

After filing, keep the SEC ticket number. Check the portal for updates. If the SEC asks for clearer screenshots, additional documents, or clarification, answer promptly.

Continue saving new messages after filing. If harassment continues, submit supplemental evidence under the same ticket if the portal allows it, or file a follow-up referencing the original ticket number.

Sample SEC Complaint Format

Use clear, factual language. Avoid insults, threats, or emotional exaggeration.

Subject: Complaint against [Name of Lending App] for suspected unauthorized online lending and unfair debt collection

Complaint body:

I am filing this complaint against [App Name], an online lending app that I used on [date]. The app appears to be operated by [company name, if shown]. If no company name is shown, state: The app does not clearly disclose the lending company or financing company behind it.

I applied for a loan of ₱[amount]. The app approved ₱[amount], but only ₱[amount] was released to my [GCash/Maya/bank account] on [date]. The app deducted ₱[amount] for [processing fee/service fee/other charges]. I did not receive a clear disclosure statement showing the total finance charge and effective interest rate.

On [date/s], collectors using [phone numbers/accounts] contacted me and demanded ₱[amount]. They also [describe threats, insults, fake legal notices, public shaming, or messages to contacts]. They contacted [name/relationship, such as employer/sister/friend], who is not my guarantor or co-maker.

I respectfully request the SEC to verify whether this app and its operator are authorized to lend in the Philippines, investigate possible violations of SEC rules on online lending and unfair debt collection, and take appropriate action.

Attached are screenshots and records showing the app details, loan transaction, amount received, collection messages, payment records, and messages sent to my contacts.

Evidence and Documents Checklist

Evidence	Why it matters	Practical tip
Valid ID of complainant	Confirms your identity	Passport, driver’s license, UMID, PhilID, PRC ID, or other government ID may help
App store listing	Identifies app name and developer	Screenshot the developer name, version, reviews, and download page
App dashboard screenshots	Shows loan amount, due date, charges, and disclosures	Capture full screen with date and time if possible
Loan agreement or disclosure statement	Shows whether Truth in Lending disclosures were given	Save PDF copies or screenshots before the app blocks access
Proof of amount received	Shows actual disbursement	Include GCash, Maya, bank, or remittance records
Payment receipts	Shows payments already made	Include reference numbers and recipient account names
Collection messages	Proves harassment, threats, or abusive language	Preserve full conversation threads
Messages sent to contacts	Supports complaint for prohibited third-party contact	Ask affected contacts to forward screenshots
Fake legal documents	Shows deceptive or threatening collection tactics	Save the entire document, including logos and sender details
Corporate details shown by app	Helps SEC verify registration and authority	Screenshot SEC registration number, CA number, address, and privacy policy
Timeline summary	Helps investigators understand the case quickly	Keep it one to two pages if possible

Filing From Abroad: OFWs and Foreign Borrowers

OFWs, dual citizens, and foreigners dealing with Philippine online lending apps can still prepare and submit an online complaint through SEC iMessage. The key is to provide enough identifying information and reachable contact details.

For overseas complainants:

Use an email address you check regularly.
Include your Philippine mobile number if still active.
If you no longer have a Philippine number, state your current country and available contact method.
Attach passport or foreign ID if that is the ID connected to the loan.
Preserve transaction records from Philippine e-wallets, banks, or remittance channels.
If an agency later requires a sworn affidavit, ask whether it must be notarized before a Philippine consulate or apostilled in the country where you are located.

Foreigners should also explain their connection to the Philippines, such as residence, employment, business, local bank or e-wallet account, or the fact that the app operated in the Philippines or collected through Philippine channels.

Where Else to Report: SEC, NPC, PNP, NBI, and DICT

Some cases belong mainly with the SEC. Others need parallel reporting because the conduct involves privacy violations, hacking, identity misuse, extortion, or threats.

Situation	Primary office to consider	Why
App appears unregistered or has no SEC authority	SEC	SEC regulates lending and financing companies
App hides corporate name, SEC number, or CA number	SEC	This may violate disclosure rules for lending platforms
Collectors contact non-guarantor contacts	SEC and NPC	This may be unfair collection and improper use of personal data
App harvests contacts, photos, or phone data	NPC	Data privacy issue
Threats, extortion, fake warrants, or identity misuse	PNP Anti-Cybercrime Group or NBI Cybercrime Division	Possible criminal or cybercrime issue
Fraudulent payment accounts or mule accounts	Payment provider, bank, e-wallet, and law enforcement	Helps preserve transaction trail
Immediate physical threats	Police station or barangay blotter	Creates a record and supports urgent safety measures

The 2026 joint advisory lists official reporting channels for related cyber and privacy issues, including the DICT Cyber Hotline, NBI Cybercrime Division, and PNP Anti-Cybercrime Group.

For data privacy complaints, the National Privacy Commission provides a complaint process and complaint-assistance forms. Formal privacy complaints may require a specific format and notarization, depending on the stage and nature of the filing. (National Privacy Commission)

Important Practical Realities After Filing

The SEC complaint does not automatically erase the loan

Even if the app is abusive or unauthorized, your complaint does not automatically cancel every obligation. If you received money, there may still be a civil issue about what amount, if any, is legally collectible.

The more realistic goal of the SEC complaint is to make the regulator examine whether the operator is authorized, whether the charges and disclosures comply with law, and whether the collection practices are unlawful or abusive.

Non-payment of debt is different from fraud

Collectors often say, “You will be jailed if you do not pay today.” As a general rule, failure to pay a debt is not the same as committing a crime. The Philippine Constitution states that no person shall be imprisoned for debt. But facts can change if there is fraud, identity misuse, falsified documents, bouncing checks, or other criminal conduct.

If the collector is using fake criminal threats to force payment, include those threats in the SEC complaint and consider reporting them to cybercrime authorities.

Contacting your entire phonebook is not normal collection

A lender may communicate with a borrower and properly named guarantors or co-makers. But contacting random people in your contact list to shame or pressure you is a major red flag.

The 2026 advisory states that contacting persons in a borrower’s contact list other than named guarantors is prohibited, and that online lending platforms must distinguish between character references and guarantors.

Third-party collectors do not excuse the lending company

Some apps blame “collection agencies” and say the lender is not responsible. SEC rules do not treat outsourcing as a free pass. SEC Memorandum Circular No. 18 states that financing and lending companies may outsource collection to third-party service providers, but ultimate responsibility remains with the financing or lending company.

RA 11765 also provides that financial service providers may be solidarily liable with accredited third-party service providers for acts or omissions in debt collection. (Supreme Court E-Library)

Common Mistakes That Weaken SEC Complaints

1. Deleting the app before collecting evidence

If you delete the app too early, you may lose the loan agreement, account dashboard, repayment schedule, and company details. Capture evidence first.

2. Reporting only the app name

Many apps use generic names. SEC investigators need the developer name, company name, numbers, websites, emails, payment accounts, and screenshots.

3. Confusing SEC registration with lending authority

A company can be registered with the SEC but still not be authorized to operate as a lending company. Look for both the corporate registration details and the Certificate of Authority.

4. Sending disorganized screenshots

A large dump of images can be difficult to review. Arrange evidence by date and label files clearly.

5. Paying collectors through personal accounts without verification

If a collector demands payment to a personal e-wallet or bank account, document it carefully. Ask for the official company account and official receipt. Do not send passwords, OTPs, ID selfies, or additional documents just because a collector threatens you.

6. Posting private information online

Publicly posting collectors’ phone numbers, photos, or personal information may create separate legal risks. Preserve evidence and send it to the proper agency instead.

7. Ignoring real court papers

Fake subpoenas and fake warrants are common intimidation tactics. But if you receive actual court documents, treat them seriously. A regulatory complaint with the SEC does not replace the need to respond in the proper court or forum.

Frequently Asked Questions

Can I file an SEC complaint even if I still owe money to the lending app?

Yes. A borrower can complain about unauthorized lending, hidden charges, abusive collection, or privacy misuse even if there is an unpaid balance. The complaint should be honest about the amount borrowed, amount received, payments made, and amount being demanded.

What if the lending app is on Google Play or the App Store?

Being available in an app store does not prove that the lender is authorized by the SEC. Save the app store listing because it helps identify the developer, app name, contact email, and other details. The SEC has previously coordinated removals of online lending platforms that lacked proper registration or disclosure. (Inquirer Business)

What if the app shows an SEC registration number?

Check whether it also shows a valid Certificate of Authority to operate as a lending or financing company. Ordinary SEC corporate registration is not the same as authority to lend.

Can a lending app contact my family, friends, or employer?

A lender may deal with properly named guarantors or co-makers, but contacting random people in your contact list for pressure, shame, or threats is a serious red flag. SEC rules and the 2026 joint advisory prohibit abusive third-party contact practices in online lending collection.

Should I file with the National Privacy Commission too?

File or seek assistance from the NPC if the app accessed your contacts, photos, camera, location, or personal data unnecessarily, or if it disclosed your personal information to others. Data privacy issues can exist alongside SEC lending violations.

What if collectors threaten to file a criminal case?

Save the exact message. A legitimate creditor may pursue lawful remedies, but threats of jail, fake warrants, fake subpoenas, public shaming, or false legal claims may support an unfair collection complaint. Serious threats may also justify a report to the PNP Anti-Cybercrime Group or NBI Cybercrime Division.

Can the SEC order a refund of excessive interest or fees?

It depends on the facts and the forum used. The SEC can investigate violations, impose sanctions, and handle certain financial consumer complaints under RA 11765. But some money claims may require a different procedure or court action, especially if the dispute is purely about civil liability or computation of debt. (Supreme Court E-Library)

How long does an SEC complaint take?

There is no single fixed timeline for every online lending complaint. Simple inquiries may move faster, while complaints involving unknown operators, fake identities, multiple apps, third-party collectors, or cybercrime issues may take longer. The most important practical step is to file a complete complaint, save the ticket number, and answer SEC requests for clarification promptly.

Do I need a notarized affidavit to file with the SEC?

For an initial online ticket through SEC iMessage, the key requirement is usually a clear complaint and supporting evidence. However, the SEC or another agency may later request a sworn statement, affidavit, or additional documents depending on the case. Privacy complaints before the NPC may involve specific forms and notarization requirements. (National Privacy Commission)

Is uninstalling the app enough to stop harassment?

No. Uninstalling may reduce app access going forward, but it does not erase data already collected or stop collectors who already have your information. Preserve evidence, revoke app permissions where possible, block abusive numbers, report the app to the proper agencies, and keep records of new harassment after filing.

Key Takeaways

An online lending app is not automatically legal just because it appears in an app store.
A legitimate lending or financing company must have proper SEC authority, not merely ordinary corporate registration.
The strongest SEC complaints include the app name, company details, loan timeline, charges, collection messages, payment records, and screenshots.
SEC rules prohibit unfair debt collection practices such as threats, insults, false claims, public shaming, and contacting non-guarantor contacts.
Data privacy violations should also be reported to the National Privacy Commission when the app misuses contacts, photos, or personal data.
Serious threats, extortion, fake legal documents, hacking, or identity misuse may require reporting to the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or DICT Cyber Hotline.
Filing a complaint does not automatically erase a real debt, but it can trigger regulatory review of the lender’s authority, disclosures, fees, and collection conduct.
Preserve evidence before deleting the app, organize your documents clearly, and save your SEC iMessage ticket number.