If an online lending app or website is threatening you, shaming you, contacting your relatives, or pretending to be a legitimate lender, the safest first move is to preserve evidence and report it to the right Philippine agency. A fake online lending company in the Philippines may be unregistered, using a stolen company name, operating an unrecorded app, collecting illegal fees, or using harassment and personal data misuse to force payment. This guide explains how to check if the lender is legitimate, where to file your complaint, what evidence to prepare, and what usually happens after you report.
First: What Makes an Online Lending Company “Fake” or Illegal?
Not every bad lender is “fake” in the same way. In practice, complaints usually fall into one or more of these categories:
| Situation | What it usually means |
|---|---|
| The app or website is not connected to any SEC-registered lending or financing company | Possible unregistered or unauthorized lending operation |
| The app uses the name, logo, or SEC registration number of a real company without authority | Possible impersonation, fraud, or identity theft |
| The company is registered, but the lending app or online platform is not properly disclosed or recorded | Possible violation of SEC online lending rules |
| The lender gives no loan contract, no true interest disclosure, or no company details | Possible violation of lending and disclosure rules |
| The app accesses your contacts, messages people who are not guarantors, or posts debt-shaming messages | Possible unfair collection practice and data privacy violation |
| The “lender” asks for advance fees, “unlocking fees,” or “verification fees,” then disappears | Possible scam or estafa-type fraud |
Under Republic Act No. 9474, or the Lending Company Regulation Act of 2007, a lending company must be a corporation, and no lending company may conduct business without authority to operate from the Securities and Exchange Commission (SEC). The law also penalizes persons who engage in lending without a valid SEC authority or who hold themselves out as a lending company without authority. (Supreme Court E-Library)
This matters because an app name alone is not enough. A legitimate lending app should be traceable to a real SEC-registered corporation with a Certificate of Authority, not just a logo, Facebook page, or mobile number.
Your Rights When an Online Lender Harasses You
A borrower can owe money and still have rights. Philippine law does not allow debt collectors to use threats, shame, deception, or misuse of personal data just because a loan is unpaid.
You cannot be jailed simply for unpaid debt
Article III, Section 20 of the 1987 Philippine Constitution states that no person shall be imprisoned for debt or non-payment of poll tax. This does not protect fraud, falsification, or other crimes, but it means a collector’s message like “we will have you arrested today for nonpayment” is often a scare tactic unless there is a separate criminal case based on actual fraud or another offense. (Supreme Court E-Library)
Debt collection must be lawful and fair
SEC Memorandum Circular No. 18, Series of 2019 prohibits unfair debt collection practices by financing and lending companies and their third-party service providers. Examples include threats of violence, threats to take illegal action, abusive or profane language, publication of borrowers’ names and personal information, false representations, contacting people at unreasonable hours, and contacting persons in the borrower’s contact list other than those named as guarantors or co-makers.
In 2026, the DICT, National Privacy Commission (NPC), and SEC also issued a public advisory reminding online lending platforms that unnecessary app permissions, excessive access to contact lists, harassment, intimidation, public shaming, and contacting people other than guarantors are prohibited. The advisory also says abusive behavior should be reported to the SEC, DICT Cyber Hotline, NBI Cybercrime Division, or PNP Anti-Cybercrime Group, depending on the issue.
Misusing your contacts may be a data privacy issue
The Data Privacy Act of 2012, or Republic Act No. 10173, protects personal information in both government and private-sector information systems. It gives data subjects rights such as the right to be informed about processing and requires lawful, proportionate, and secure processing of personal data. (National Privacy Commission)
If an online lending app accessed your contacts, sent messages to your friends, disclosed your alleged debt, used your photo, or processed your data beyond what was necessary for the loan, the complaint may belong not only with the SEC but also with the NPC.
What to Do Before Filing a Report
Before uninstalling the app or deleting messages, secure your evidence. Online lending complaints often fail or slow down because the borrower only has a story but no screenshots, URLs, numbers, transaction records, or app details.
Take screenshots and screen recordings Capture the app name, app store listing, developer name, website URL, Facebook page, phone numbers, text messages, chat messages, emails, threats, call logs, and any public shaming posts.
Save the loan details Keep copies of the loan agreement, disclosure statement, repayment schedule, interest rate, penalties, disbursement record, bank or e-wallet receipt, and any “processing fee” demand.
Identify the company behind the app Look for the corporate name, SEC registration number, Certificate of Authority number, business address, customer service email, and privacy policy. If the app gives only a personal GCash number or random phone number, note that.
Preserve proof of data misuse Ask affected contacts to send screenshots of messages they received. Save the sender number, message content, time, and date.
Do not edit the screenshots Cropping is fine for readability, but keep originals. Investigators may later ask for complete screenshots showing timestamps, URLs, and account identifiers.
Secure your accounts Revoke unnecessary app permissions, change passwords, enable two-factor authentication, and warn your contacts not to respond to collectors pretending to be police, lawyers, barangay officials, or court staff.
Where to Report a Fake Online Lending Company in the Philippines
Different agencies handle different parts of the problem. Filing with only one office may not cover everything.
| Problem | Main office to report to | Best for |
|---|---|---|
| Unregistered lending company, fake lending app, unfair debt collection | SEC Financing and Lending Companies Department / FINLEND | Legitimacy checks, unauthorized lending, abusive collection by lending or financing companies |
| Contact-list harvesting, public shaming, unauthorized processing of personal data | National Privacy Commission | Data privacy violations, unlawful use or disclosure of personal information |
| Threats, fraud, scam, identity theft, extortion, cyberlibel | NBI Cybercrime Division or PNP Anti-Cybercrime Group | Criminal investigation |
| Online harm or cyber scam reporting | DICT/CICC cyber reporting channels | Coordinated cyber incident reporting |
| Bank, e-wallet, or payment transaction issues | Your bank/e-wallet first, then BSP if unresolved | Freezing, tracing, or disputing financial transactions involving BSP-supervised institutions |
The 2026 DICT-NPC-SEC advisory lists the SEC iMessage portal for unfair debt collection complaints, the DICT Cyber Hotline email, the NBI Cybercrime Division email, and the PNP Anti-Cybercrime Group email and telephone number for harassment, threats, fraud, and scams.
Step-by-Step Guide to Reporting
Step 1: Check the SEC registration and online lending platform list
Start by checking whether the company is listed as a lending or financing company with authority to operate and whether the online lending platform is recorded with the SEC. The SEC has publicly referred users to its lists of lending/financing companies, recorded online lending platforms, and complaint information pages. (www.foi.gov.ph)
A red flag exists when:
- The app name does not match the corporate name.
- The app uses a different SEC registration number from the company it claims to represent.
- The company is registered as a regular corporation but has no lending authority.
- The app claims “SEC registered” but shows no Certificate of Authority number.
- The app is not on the list of recorded online lending platforms.
- The app store developer is a foreign or unrelated entity while the loan contract names a different Philippine company.
Registration also does not excuse harassment. A registered lender may still violate debt collection, privacy, consumer protection, or criminal laws.
Step 2: File a complaint with the SEC
For suspected fake or abusive online lending companies, file through the SEC iMessage portal. The SEC portal accepts feedback, reports, and complaints and allows users to open a ticket and check ticket status. (Securities and Exchange Commission)
Your SEC complaint should include:
- Your full name, contact number, and email address
- Name of the app, website, Facebook page, or lending platform
- Claimed corporate name, SEC registration number, and Certificate of Authority number, if shown
- App store link, website URL, or social media URL
- Loan amount, amount received, charges, due date, and amount being demanded
- Screenshots of threats, harassment, public shaming, or misleading claims
- Phone numbers, sender IDs, collection agency names, and collector names used
- Names and screenshots from contacts who were messaged
- Bank, GCash, Maya, or remittance proof if money was paid
- A short timeline of what happened
A practical subject line is:
Complaint against [App Name] for suspected unauthorized online lending and unfair debt collection practices
In the body, state clearly whether you are asking the SEC to verify the company’s authority, investigate the app, act on unfair collection practices, or confirm whether the online lending platform is recorded.
Step 3: File with the National Privacy Commission if your data or contacts were misused
File with the NPC when the app accessed your contact list, messaged people who were not guarantors, disclosed your debt, used your photo, posted defamatory content, or processed your data without proper consent.
The NPC requires a formal complaint in a specific format. Its complaint page instructs complainants to download the form, print and fill it out, have it notarized, then submit it in person, by courier, or by scanning and emailing it to the NPC complaints email. (National Privacy Commission)
Attach:
- Your notarized complaint-affidavit
- Screenshots of the app permissions requested
- Screenshots of messages sent to your contacts
- Privacy notice and consent screen, if available
- Proof that the contacted persons were not guarantors
- Screenshots of public posts, group chats, or messages disclosing your alleged debt
- Copy of valid ID
The NPC has previously acted on online lending app complaints involving harassment, shaming, and misuse of contact lists. In one NPC matter, the agency discussed dangerous permissions involving access to a complainant’s mobile contact list and noted prior actions involving online lending apps and debt-shaming. (National Privacy Commission)
Step 4: Report threats, scams, identity theft, or extortion to NBI or PNP
If the fake online lending company threatened violence, impersonated police or court officers, used your identity, demanded money through deception, hacked accounts, posted defamatory accusations, or used blackmail, report to law enforcement.
The NBI Cybercrime Division handles investigative assistance for victims of computer crimes. Its Citizen’s Charter states that the service is available to the general public, with no filing fee listed, and includes complaint filing, preliminary interview, sworn statements, and collection of supporting documents. (National Bureau of Investigation)
The Cybercrime Prevention Act of 2012, or Republic Act No. 10175, covers computer-related fraud, computer-related identity theft, and libel committed through a computer system. It also identifies the NBI and PNP as law enforcement authorities for cybercrime enforcement. (Supreme Court E-Library)
Depending on the facts, a fake lending operation may also involve provisions of the Revised Penal Code, such as estafa under Article 315, grave threats under Article 282, grave coercions under Article 286, unjust vexation under Article 287, or libel under Articles 353 to 355. In Disini v. Secretary of Justice, the Supreme Court discussed cyberlibel under RA 10175 and the Revised Penal Code provisions on libel committed through online means. (Supreme Court E-Library)
Step 5: Report the payment channel and escalate to BSP if needed
If you sent money through a bank, e-wallet, money service business, or payment platform, report the transaction to that provider immediately and ask for a case number. Provide receipts, account numbers, transaction IDs, and screenshots.
The BSP consumer assistance mechanism is generally a second-level channel for unresolved concerns involving BSP-supervised financial institutions. BSP materials also clarify that complaints about financing and lending companies, online lending apps, and their collection agencies are best directed to the SEC, while scams or fraud should be reported to law enforcement agencies such as the PNP, NBI, or CICC. (Bureau of Soils and Water Management)
Evidence Checklist
| Evidence | Why it matters |
|---|---|
| Screenshots of app store listing | Shows app name, developer, URL, ratings, and public identity |
| Screenshots of loan offer and agreement | Shows terms, interest, fees, due date, and disclosures |
| Proof of amount received | Shows whether charges were deducted before release |
| Collection messages and call logs | Shows harassment, threats, frequency, and timing |
| Screenshots from contacted relatives or friends | Proves third-party contact and possible privacy violation |
| App permissions screen | Shows access to contacts, photos, camera, location, or storage |
| Payment receipts | Helps trace accounts used by scammers |
| SEC verification screenshots | Shows mismatch or absence from SEC lists |
| Valid ID | Usually required for formal complaints |
| Notarized affidavit | Often required for NPC or criminal complaints |
Expected Fees and Timelines
| Office | Filing fee | Practical timeline |
|---|---|---|
| SEC complaint through iMessage | Usually no filing fee for consumer complaint filing | Ticket acknowledgment may be quick; investigation or enforcement can take weeks or months |
| NPC formal complaint | Check current NPC schedule of fees; notarization may have separate cost | Intake and evaluation may take weeks; mediation or adjudication can take longer |
| NBI Cybercrime Division | NBI Citizen’s Charter lists no fee for the investigative assistance steps | Intake may be same day; investigation depends on evidence and traceability |
| PNP Anti-Cybercrime Group | Generally no complaint filing fee | Initial assessment may be quick; case build-up can take months |
| Bank/e-wallet complaint | Usually no complaint filing fee | Urgent fraud reports should be filed immediately; reversal or freezing depends on provider rules and timing |
| BSP escalation | No ordinary consumer filing fee | BSP acts as a second-level channel after the financial institution’s own process |
Common Mistakes That Delay Complaints
Deleting the app too early
Uninstalling may erase useful evidence, including app permissions, in-app loan terms, notices, and account details. Capture everything first, then revoke permissions and secure your phone.
Reporting only on social media
Posting online may warn others, but it is not the same as filing a formal complaint with the SEC, NPC, NBI, PNP, or your financial institution. It may also expose you to cyberlibel risk if you name individuals without sufficient basis.
Paying a random collector without verification
If you decide to settle a legitimate debt, pay only through traceable and verifiable channels connected to the actual registered company. Avoid paying personal e-wallet accounts unless the lender can prove the account is an authorized payment channel.
Assuming “SEC registered” means legal lending authority
A corporation may be SEC-registered for general corporate existence but still lack authority to operate as a lending company. For lending, the key question is whether it has the proper lending or financing authority and whether the online lending platform is properly recorded or disclosed.
Ignoring a legitimate loan because the collector behaved illegally
Harassment does not automatically erase a valid loan. The better approach is to dispute illegal charges, demand a proper statement of account, preserve evidence, and report abusive conduct while keeping proof of any payments.
Special Notes for OFWs, Filipinos Abroad, and Foreigners
If you are outside the Philippines, you can still preserve digital evidence and use online channels such as the SEC iMessage portal or NPC email submission process where allowed. If an agency requires a sworn or notarized affidavit, ask whether a Philippine consular notarization, local notarization with apostille, or other authentication is required for documents executed abroad.
For documents signed outside the Philippines, Philippine embassy and consulate guidance commonly treats affidavits, sworn statements, and similar private documents as documents that may be consularized or notarized before a consular officer, while some countries use apostille procedures for documents intended for use in the Philippines. Requirements vary by country, so check the Philippine Embassy or Consulate serving your location. (Philippine Embassy Canberra)
Foreigners dealing with a Philippine online lending app should keep passport/ID copies secure and avoid sending additional selfies or identity documents to collectors. If identity documents were misused, include that fact in the NBI/PNP complaint as possible identity theft or fraud.
Frequently Asked Questions
How do I know if an online lending company is fake in the Philippines?
Check whether the lender has a real corporate name, SEC registration number, Certificate of Authority, business address, and recorded online lending platform. If the app uses only a mobile number, personal e-wallet, fake SEC number, or a name that does not match SEC records, treat it as suspicious and report it.
Where do I report a fake online lending app?
Report unauthorized lending and unfair debt collection to the SEC. Report contact-list misuse, debt-shaming, or unauthorized processing of personal data to the NPC. Report threats, fraud, identity theft, or extortion to the NBI Cybercrime Division or PNP Anti-Cybercrime Group.
Can an online lending app contact my relatives or friends?
For debt collection, online lending platforms should not contact people in your contact list other than guarantors. The 2026 DICT-NPC-SEC advisory states that contacting persons on the borrower’s contact list other than those named as guarantors is prohibited.
Can I be arrested for not paying an online loan?
You cannot be imprisoned simply for debt. However, a separate criminal case may exist if there is fraud, falsification, identity theft, or another crime. Threats of immediate arrest by collectors are often meant to intimidate and should be documented.
What if the app already messaged my contacts?
Ask your contacts to send screenshots showing the sender, message, date, and time. Include those screenshots in your SEC and NPC complaints. If the messages include threats, defamatory accusations, or extortion, include them in your NBI or PNP complaint as well.
Should I still pay if the lending app is not registered?
Do not pay blindly to an unverified personal account. Ask for the legal company name, Certificate of Authority, official statement of account, and authorized payment channels. A real loan obligation may still need to be addressed, but unauthorized lending and illegal collection should be reported.
Can I get my money back after reporting?
Government agencies may investigate, sanction, suspend, or revoke authority, and law enforcement may pursue criminal cases. Refunds are not always automatic. Recovery may depend on the payment channel, settlement, restitution in a criminal case, or a separate civil action.
Do I need a lawyer to file the complaint?
For SEC and initial law enforcement reporting, many complainants file on their own using screenshots and a clear timeline. For NPC formal complaints, criminal affidavits, large losses, identity theft, or public shaming that caused serious damage, a properly prepared affidavit can make the complaint stronger.
Key Takeaways
- A legitimate online lender should be traceable to an SEC-authorized lending or financing company.
- Report fake or unauthorized online lending companies to the SEC, especially through the SEC iMessage portal.
- Report contact-list misuse, debt-shaming, and unauthorized personal data processing to the NPC.
- Report threats, scams, identity theft, extortion, and cyber-enabled fraud to the NBI Cybercrime Division or PNP Anti-Cybercrime Group.
- Preserve screenshots, app links, phone numbers, transaction receipts, loan terms, and messages before deleting anything.
- You cannot be jailed merely for unpaid debt, but fraud or other crimes are separate matters.
- Harassment does not automatically erase a valid loan, but it can expose the lender or collector to administrative, civil, or criminal liability.