If a lending app is threatening you, contacting your family or employer, demanding “unlocking fees,” or operating under a name you cannot find in SEC records, you are not powerless. In the Philippines, complaints against unregistered, unrecorded, or abusive online lending apps are primarily filed with the Securities and Exchange Commission through the SEC iMessage portal, especially under its Financing and Lending Companies Department. This guide explains how to verify the app, prepare evidence, file the complaint, and know when to involve the National Privacy Commission, PNP, NBI, or other agencies.

What Does “Unregistered Lending App” Mean in the Philippines?

People often say “unregistered lending app,” but the SEC usually looks at several different legal issues:

Issue	What it means	Why it matters
No SEC registration	The business is not registered as a Philippine corporation with the SEC	A lending company must generally be a corporation before it can legally operate
No Certificate of Authority	The company may exist as a corporation but has no SEC authority to operate as a lending or financing company	A corporation cannot lend to the public as a lending company merely because it has SEC incorporation papers
Unrecorded online lending platform	The corporation may be licensed, but the specific mobile app, website, or online platform was not reported or recorded with the SEC	The app itself may be unauthorized even if a related company exists
Scam posing as a lender	The app or page asks for advance fees, taxes, deposits, or “verification payments” before releasing money	This may be a fraud or cybercrime issue, not just an SEC licensing issue

Under the Lending Company Regulation Act of 2007, Republic Act No. 9474, a lending company must be a corporation and must have authority from the SEC before conducting lending business. RA 9474 also authorizes the SEC to supervise lending companies, require reports, conduct investigations, and impose administrative sanctions such as fines, suspension, or revocation of authority. Operating a lending business without valid SEC authority may expose responsible persons to fines, imprisonment, or both. (Supreme Court E-Library)

A common mistake is assuming that an app is legitimate because it appears on Google Play, the Apple App Store, Facebook, Telegram, or a website with a professional logo. App-store availability is not the same as SEC authority. A legitimate lending or financing company should be able to show its corporate name, SEC registration number, Certificate of Authority number, and the identity of the company actually granting the loan.

Legal Basis for Filing an SEC Complaint Against a Lending App

Several Philippine laws and SEC rules may apply at the same time.

RA 9474: Lending companies need SEC authority

RA 9474 regulates lending companies and gives the SEC power to supervise them. The law defines a lending company as a corporation engaged in granting loans from its own capital funds or from funds sourced from not more than 19 persons, excluding banks, cooperatives, pawnshops, insurance companies, and other regulated institutions. A lending company cannot simply start lending to the public without SEC authority. (Supreme Court E-Library)

RA 3765: Borrowers must be told the true cost of credit

The Truth in Lending Act, Republic Act No. 3765, requires meaningful disclosure of finance charges so borrowers understand the actual cost of credit. In online lending complaints, this becomes important when the app hides processing fees, deducts charges before releasing the loan, displays one interest rate but collects another, or fails to show a clear disclosure statement before the borrower accepts the loan. (Lawphil)

RA 11765: Financial consumers are protected

The Financial Products and Services Consumer Protection Act, Republic Act No. 11765, applies to financial products and services and recognizes the role of financial regulators, including the SEC, in enforcing consumer protection rules. It covers market conduct, responsible pricing, complaint handling, and fair treatment of financial consumers. (Supreme Court E-Library)

SEC rules on online lending platforms and debt collection

The SEC has issued rules requiring lending and financing companies to disclose their corporate name, SEC registration number, and Certificate of Authority number in advertisements and online lending platforms. SEC Memorandum Circular No. 19, Series of 2019, also required companies to report online lending platforms to the SEC. (Philippine News Agency)

The SEC also issued Memorandum Circular No. 18, Series of 2019, on unfair debt collection practices. It covers lending companies, financing companies, and third-party collection service providers. Unfair practices include threats, violence, criminal means, deceptive means, and disclosure or publication of borrowers’ personal information. (LPR ADB)

Data Privacy Act: Contact-list harvesting and public shaming

The Data Privacy Act of 2012, Republic Act No. 10173, protects personal information in both government and private information systems. In online lending cases, this often matters when an app accesses a borrower’s contacts, messages relatives or co-workers, posts photos or IDs, or uses personal information for public shaming. (National Privacy Commission)

The National Privacy Commission has specifically addressed complaints involving online lenders harvesting phone and social media contacts, harassment, and reputational harm from misuse of borrower and contact-list data. (National Privacy Commission)

Civil Code and criminal law issues

A loan is still a contract. Under the Civil Code, obligations from contracts are generally binding and must be performed in good faith, but contract terms cannot override laws, morals, good customs, public order, or public policy. This is why a lender cannot defend harassment, illegal disclosure, deception, or unauthorized lending by saying “the borrower clicked agree.” (Lawphil)

If the app or collector threatens harm, uses intimidation, creates fake legal documents, impersonates authorities, or commits fraud online, the matter may also involve the Revised Penal Code and the Cybercrime Prevention Act of 2012, Republic Act No. 10175. These issues are usually handled by law enforcement, such as the PNP Anti-Cybercrime Group or NBI Cybercrime Division, alongside the SEC complaint. (Lawphil)

First, Check Whether the Lending App Is Authorized

Before filing, do a quick verification. This helps you write a stronger complaint and avoid vague statements like “I think they are illegal.”

Check these details

Look for the following in the app, website, text messages, loan agreement, disclosure statement, and payment instructions:

Exact app name
Developer name in the app store
Corporate name of the lender
SEC registration number
Certificate of Authority number
Business address
Website or app-store link
Customer service number or email
Name of the collecting company, if different from the lender
GCash, Maya, bank, or crypto wallet receiving payments
Whether the app appears in SEC advisories or recorded online lending platform lists

You can check SEC resources such as the SEC iMessage portal, Check with SEC, and the SEC’s published lists and advisories on lending companies, financing companies, and recorded online lending platforms. SEC materials have also reminded the public to verify lending and financing companies and recorded online lending platforms through SEC lists. (www.foi.gov.ph)

Red flags that the app may be unauthorized or a scam

Be extra careful if the app or collector:

Refuses to provide a registered corporate name
Uses only a first name, nickname, Telegram account, or Facebook page
Shows no SEC registration number or Certificate of Authority number
Demands an advance “processing fee,” “tax,” “insurance,” “unlocking fee,” or “wallet verification” before releasing the loan
Asks you to install an APK file outside official app stores
Threatens to message all your contacts
Sends fake barangay, police, court, or NBI documents
Tells you that a warrant of arrest will be issued immediately for nonpayment
Changes app names frequently
Uses different payment wallets under individual names

The SEC has warned about advance-fee lending scams where victims are asked to pay deposits, processing fees, or other charges before loan release; legitimate lending or financing companies should not be asking for such advance payments as a condition for releasing a loan. (www.foi.gov.ph)

Evidence to Prepare Before Filing the SEC Complaint

Do not rely only on a written story. SEC complaints are stronger when supported by screenshots, receipts, and a clear timeline.

Evidence	Why it matters	Practical tip
Valid ID and contact details	Identifies the complainant and allows SEC to communicate with you	Use a government ID if available
App screenshots	Shows the app name, logo, loan terms, permissions, and user interface	Screenshot before deleting the app
App-store or website link	Helps SEC identify the exact platform	Copy the full link if possible
Loan agreement or disclosure statement	Shows interest, fees, penalties, maturity date, and borrower consent	Download or screenshot every page
Proof of disbursement	Shows how much money you actually received	Include bank, GCash, Maya, or remittance receipts
Proof of payments	Shows what you already paid and to whom	Include wallet numbers, account names, reference numbers, and dates
Harassment screenshots	Shows abusive collection practices	Include timestamps and phone numbers
Call logs and recordings	Shows frequency and timing of collection calls	Follow platform rules and preserve original files
Messages sent to contacts	Proves contact-list misuse or public shaming	Ask affected relatives or co-workers to send screenshots
SEC verification result	Shows that the app, company, or platform could not be found	Write the date and source you checked
Chronology	Helps the reviewer understand the case quickly	Use dates, amounts, names, and events in order

A simple chronology is extremely useful. For example:

“On March 3, 2026, I downloaded the app CashABC from Google Play. The app offered a ₱5,000 loan for 7 days but released only ₱3,200 to my GCash. On March 10, 2026, collectors demanded ₱6,800. On March 11, 2026, they messaged my sister and employer using information from my phone contacts. I checked the SEC list on March 12, 2026 and could not find CashABC or the named company.”

How to File the SEC Complaint Through iMessage

The SEC now uses its iMessage system as a web-based platform for public inquiries, complaints, incidents, and requests. The system generates an electronic ticket and allows users to track status online. (Securities and Exchange Commission)

Step 1: Go to the SEC iMessage portal

Visit the SEC iMessage portal and choose the option to open a new ticket. The portal is the official SEC channel for submitting public complaints and tracking them electronically. (Securities and Exchange Commission)

Step 2: Sign in or create access through eSECURE

The SEC user guide states that users may be asked to sign in using eSECURE before completing the ticket form. Prepare an email address you regularly check, because SEC updates and requests for additional information may be sent through the ticketing system. (Securities and Exchange Commission)

Step 3: Select the correct SEC service

For lending app complaints, the relevant office is usually the Financing and Lending Companies Department. In the iMessage service list, the category includes “Complaints on Financing and Lending Companies” under the Legal and Enforcement Division. (Securities and Exchange Commission)

If you are unsure whether the company is a lending company, financing company, or outright scam, describe the facts clearly. The SEC can route or evaluate the ticket based on the information you provide.

Step 4: Write a clear complaint summary

Your complaint should be factual, specific, and organized. Avoid emotional labels alone such as “scammer” or “illegal app” without details. Instead, state the facts that show why the app may be unregistered, unrecorded, abusive, or deceptive.

Include:

Your full name and contact details
Name of the lending app
App-store link, website, Facebook page, or Telegram account
Name of the company shown in the app, if any
SEC registration number or Certificate of Authority number shown, if any
Date you downloaded or used the app
Loan amount advertised
Actual amount released to you
Fees deducted before release
Interest, penalties, and total amount demanded
Collection messages, threats, or contact-list harassment
Names, numbers, wallet accounts, and bank accounts used by collectors
SEC records you checked and the result
What you are asking SEC to investigate

A strong summary might read:

“I am filing a complaint against the online lending app CashABC for operating without a visible SEC Certificate of Authority, failing to disclose the true cost of the loan, deducting excessive fees before releasing the proceeds, and using abusive collection practices. The app accessed my contacts and collectors messaged my relatives and employer even though they were not guarantors. I checked SEC records on April 5, 2026 and could not find the app or the named company in the list of recorded online lending platforms.”

Step 5: Upload evidence in readable files

Upload screenshots, receipts, loan documents, and messages. If there are many screenshots, combine them into a single PDF and label sections clearly:

“A - App Profile and Loan Offer”
“B - Loan Disbursement and Payment Receipts”
“C - Collection Threats”
“D - Messages Sent to Contacts”
“E - SEC Verification Screenshots”

Make sure the file names are understandable. A reviewer should not have to open 40 random images named “IMG_0031.”

Step 6: Submit and save the ticket number

After submission, save the ticket number and confirmation email. The SEC iMessage system classifies tickets as open or closed; an open ticket means it is still being processed, while a closed ticket may indicate that the matter was resolved, acted upon, or requires another step. (Securities and Exchange Commission)

Step 7: Monitor the ticket and reply promptly

If SEC asks for clarification, reply through the portal and upload additional files if needed. The iMessage user guide allows users to post replies and upload files in the ticket conversation. (Securities and Exchange Commission)

Do not create multiple tickets for the same issue unless there is a new, separate incident. Multiple duplicate tickets can make tracking harder.

What the SEC Can Do

The SEC complaint process is administrative and regulatory. This means the SEC looks at whether the lending or financing company, online lending platform, officers, or agents violated SEC-administered laws and rules.

Possible SEC actions may include:

Requiring the company to explain
Investigating whether the company or app is authorized
Evaluating unfair debt collection practices
Issuing warnings or advisories
Imposing administrative fines
Suspending or revoking authority to operate
Referring possible criminal or cybercrime issues to proper agencies
Coordinating action against unauthorized online lending platforms

The 2026 joint advisory of the DICT, NPC, and SEC states that violations involving online lending platforms may subject erring financing or lending companies to fines, suspension or revocation of authority to operate, and other penalties. It also identifies the SEC Financing and Lending Companies Department as the proper authority for unfair debt collection complaints, with submission through iMessage and hotline 1-4732.

The SEC complaint is not the same as a court case for damages or a small-claims case for money recovery. If you paid an advance-fee scammer and want to recover money, or if there is identity theft, coercion, or threats, other remedies may also be needed.

When to File With NPC, PNP, NBI, or Other Agencies

Online lending problems often involve more than one agency. Use this table as a practical guide.

Problem	Main agency to consider	Why
App has no SEC authority or no recorded online lending platform	SEC	Licensing, registration, and lending-company regulation
Harassing collection calls or messages	SEC	Unfair debt collection practices by lending or financing companies and agents
App accessed contacts or messaged relatives/co-workers	National Privacy Commission	Possible misuse of personal data and contact-list harvesting
Public shaming, posting photos, IDs, or personal details	NPC and SEC	Data privacy violation plus unfair collection issue
Threats of physical harm, fake warrants, extortion, or fraud	PNP Anti-Cybercrime Group or NBI Cybercrime Division	Possible criminal or cybercrime case
Unauthorized bank, e-wallet, or payment account issue	Bank, e-wallet provider, and possibly BSP consumer channels	Payment service or financial account issue
Actual court summons received	The court named in the summons	Court deadlines must be handled separately from SEC complaints

For data privacy complaints, the NPC provides a complaint process using its official complaint form, which must generally be printed, filled out, notarized, and submitted personally, by courier, or by scanned copy through the NPC’s official complaint email. (National Privacy Commission)

For threats, fraud, scams, and online harassment, the 2026 joint advisory identifies the DICT Cyber Hotline, NBI Cybercrime Division, and PNP Anti-Cybercrime Group as relevant reporting channels.

Practical Timelines and What to Expect

Timelines vary depending on the volume of complaints, completeness of evidence, identity of the respondent, and whether the app is a known subject of SEC advisories.

Stage	Typical practical expectation
iMessage ticket creation	Usually immediate once the ticket is submitted
Initial review	May take days to weeks depending on workload and completeness
Request for more documents	Common if screenshots are unclear or the company is hard to identify
Regulatory investigation	Can take weeks or months, especially if multiple apps, shell names, or foreign operators are involved
App takedown or public advisory	Not automatic and may depend on SEC findings, coordination, and platform response
Criminal investigation	Separate from SEC and handled by law enforcement

The biggest bottlenecks are usually poor evidence, unclear app identity, deleted messages, missing payment details, and complaints that name only an app nickname rather than the company, developer, URL, or payment account.

Important Rules on Interest, Fees, and Small Online Loans

High interest alone is not always automatically illegal. Philippine law generally allows parties to agree on loan terms, but those terms must comply with special laws, disclosure requirements, consumer protection rules, and applicable caps.

For covered loans, SEC Memorandum Circular No. 3, Series of 2022, implements interest-rate and fee caps based on the BSP-approved policy. The caps apply to unsecured, general-purpose loans offered by lending companies, financing companies, and their online lending platforms when the loan amount does not exceed ₱10,000 and the tenor is up to four months. The caps include a nominal interest rate limit of 6% per month, an effective interest rate limit of 15% per month including certain fees, a penalty cap of 5% per month on the outstanding scheduled amount due, and a total cost cap of 100% of the total amount borrowed. (Bureau of the Treasury)

When preparing your complaint, show the math:

Amount advertised: ₱5,000
Amount actually released: ₱3,200
Processing fee deducted: ₱1,800
Amount demanded after 7 days: ₱6,800
Penalty added per day: ₱500
Total paid so far: ₱4,000

This helps the SEC see whether the issue is non-disclosure, excessive charges, unfair collection, or all of these.

Common Scenarios

The app asked me to pay a fee before releasing the loan

This is a major red flag. Many victims are told to pay a “processing fee,” “insurance,” “tax,” “anti-money laundering clearance,” or “account correction fee.” After payment, the supposed lender asks for another fee or blocks the borrower.

File with the SEC if the app is posing as a lending company. Also consider reporting to PNP or NBI if there is fraud, identity theft, or extortion.

The app released money but deducted huge fees immediately

This is common in abusive online lending. Save the loan offer, disclosure statement, amount released, and amount demanded. The issue may involve Truth in Lending, responsible pricing, unfair contract terms, or applicable rate caps for covered loans.

The collector messaged my contacts

This is both a collection and privacy issue. The 2026 joint advisory states that online lending platforms should not contact persons in the borrower’s contact list other than guarantors, and that accessing contact lists or processing excessive personal data may violate data privacy rules.

File with the SEC for unfair collection and with the NPC for misuse of personal data.

The collector says I will be arrested for nonpayment

A collector cannot create a warrant of arrest by text message. Warrants are issued by courts. Nonpayment of a loan is generally a civil matter, although fraud may become criminal if there was deceit from the beginning or if separate criminal acts were committed.

Save threatening messages, especially if they use fake court, police, NBI, barangay, or prosecutor documents.

I am an OFW or foreigner outside the Philippines

You can still file through SEC iMessage if the lending app, borrower account, payment channel, or collection activity involves the Philippines. Use clear digital evidence and provide a reachable email address.

If documents are executed abroad and later needed for a formal proceeding, notarization, consular acknowledgment, or apostille may become relevant. For the initial SEC iMessage complaint, screenshots, receipts, app links, and a clear chronology are usually more important than formal foreign-document authentication.

Foreign ownership of a lending company does not remove SEC regulation. RA 10881 amended Philippine rules to allow up to 100% foreign ownership of lending companies, subject to legal limitations, but the company must still comply with Philippine corporate, lending, and SEC requirements. (Supreme Court E-Library)

Mistakes That Can Weaken Your SEC Complaint

Avoid these common mistakes:

Filing with only the app name and no screenshots, links, receipts, or phone numbers
Deleting the app before capturing loan terms and collector messages
Failing to show the amount actually released versus the amount demanded
Sending cropped screenshots with no date, time, sender, or phone number
Mixing several lending apps in one confusing complaint without separating facts
Paying more “unlocking” or “verification” fees without preserving payment details
Ignoring actual court papers because you assumed every legal notice is fake
Posting your own ID, phone number, loan agreement, or private details publicly on social media
Filing only with one agency when the facts also involve privacy violations or cybercrime

A good complaint is not necessarily long. It is complete, chronological, and supported by evidence.

Sample SEC Complaint Narrative

You can adapt this format to your facts:

I am filing this complaint against the online lending app [APP NAME], which appears to be operating without proper SEC authority or without being a recorded online lending platform. I downloaded the app on [DATE] through [Google Play/App Store/website/link]. The app represented that I could borrow ₱[AMOUNT], but only ₱[AMOUNT RELEASED] was released to my [bank/e-wallet] after deductions of ₱[FEES].

The app did not clearly disclose the full finance charges before the loan was released. After [NUMBER] days, collectors using the numbers [NUMBERS] demanded ₱[AMOUNT] and threatened to contact my relatives, employer, and phone contacts. On [DATE], they messaged [NAME/RELATIONSHIP], who was not my guarantor. Screenshots are attached.

I checked SEC records on [DATE] and could not find the app/company in the relevant SEC list. I request the SEC to investigate whether this app, its operator, and its collection agents are authorized to lend and whether they violated SEC rules on online lending platforms, disclosure, and unfair debt collection practices.

Frequently Asked Questions

Where do I file a complaint against an unregistered lending app in the Philippines?

File the complaint with the SEC through the SEC iMessage portal. Choose the service for complaints involving financing and lending companies if available, and describe the app, company, loan, payment accounts, and collection conduct clearly. (Securities and Exchange Commission)

How do I know if a lending app is SEC-registered?

Check whether the company has an SEC registration number, a Certificate of Authority to operate as a lending or financing company, and whether the online lending platform is recorded with the SEC. Do not rely only on the app name, logo, or app-store listing.

Is an app legal just because it is on Google Play or the Apple App Store?

No. App-store presence is not the same as SEC authority. A lending app may still be unrecorded, unauthorized, or operated by a company without a valid Certificate of Authority.

Can a lending app contact my phone contacts?

The 2026 joint advisory states that online lending platforms should not contact persons in the borrower’s contact list other than guarantors. If the app accessed your contacts or messaged relatives, co-workers, or friends, preserve screenshots and consider filing with both the SEC and NPC.

Can I go to jail for not paying an online loan?

Nonpayment of a loan is generally a civil obligation, not an automatic criminal case. However, separate criminal issues may arise if there was fraud, falsification, identity theft, threats, or other criminal conduct. A collector’s text message saying “warrant issued today” is not the same as a real court warrant.

Can the SEC order the lending app to stop harassing me?

The SEC can investigate unfair debt collection practices and impose regulatory sanctions on covered lending or financing companies and their agents. If there are threats, extortion, fake legal documents, or immediate safety concerns, also report to PNP ACG or NBI Cybercrime.

Can the SEC make the app refund my money?

The SEC complaint process is mainly regulatory. It can lead to investigation and sanctions, but recovery of money may require a separate process depending on the facts, such as a complaint with law enforcement for fraud, a court action, or other remedies.

Should I file with SEC or NPC?

File with the SEC if the issue involves an unauthorized lending app, unfair debt collection, hidden charges, or lending-company violations. File with the NPC if the app accessed contacts, disclosed personal data, posted your information, or messaged people who were not guarantors. Many online lending cases justify filing with both.

What if I already deleted the app?

Gather what remains: app-store download history, SMS messages, call logs, GCash or Maya receipts, bank transfers, emails, screenshots sent to friends, and messages received by your contacts. You can also search your phone gallery, cloud backups, and email for saved screenshots.

Are very high online loan interest rates illegal?

Not always by themselves, but interest, fees, and penalties must be properly disclosed and must comply with applicable laws and SEC rules. For covered small online loans of not more than ₱10,000 and a tenor of up to four months, SEC MC No. 3, Series of 2022, sets specific caps on interest, effective interest, penalties, and total cost. (Bureau of the Treasury)

Key Takeaways

A lending app is not automatically legal just because it appears online or in an app store.
A lending company generally needs SEC registration and a Certificate of Authority; an online lending platform may also need to be recorded with the SEC.
File lending-app complaints through the SEC iMessage portal, especially under the Financing and Lending Companies Department.
Strong evidence matters: screenshots, receipts, app links, loan terms, collection messages, and a clear timeline.
Contact-list harassment, public shaming, and misuse of personal data may also justify a complaint with the National Privacy Commission.
Threats, fake warrants, fraud, extortion, and identity theft should also be reported to cybercrime authorities.
SEC complaints are regulatory; money recovery, criminal liability, or damages may require separate proceedings.
The best complaint is specific, chronological, and supported by documents showing exactly what happened.