I. Introduction

In the Philippines, lending and financing businesses are regulated because they deal directly with the public’s money, credit, personal data, and financial welfare. A legitimate lending company must comply with registration, disclosure, fair collection, privacy, advertising, and corporate requirements. A fake “SEC-registered” lending company, on the other hand, may use false claims of legitimacy to deceive borrowers, collect illegal charges, misuse personal information, harass debtors, or operate an investment or lending scam.

This article explains how fake SEC-registered lending companies operate, what laws may apply, how to verify registration, what evidence to gather, where to report, and what remedies may be available in the Philippine context.

This is legal information, not a substitute for advice from a lawyer or direct guidance from the Securities and Exchange Commission, the National Privacy Commission, the Bangko Sentral ng Pilipinas, law enforcement, or the courts.

II. What Is a “Fake SEC-Registered Lending Company”?

A fake SEC-registered lending company may fall into several categories.

First, it may be a company that falsely claims to be registered with the Securities and Exchange Commission when it is not registered at all. It may display a fake SEC certificate, fake company registration number, fake lending license, or altered document.

Second, it may be a real corporation registered with the SEC but not authorized to operate as a lending company. In the Philippines, ordinary corporate registration is not the same as authority to operate as a lending or financing company. A company may be incorporated, but it still needs the proper authority or license to engage in lending or financing activities.

Third, it may be a scammer impersonating a legitimate lending company. The scammer may copy the name, logo, SEC registration number, certificate of authority, website, or social media page of a real company. Victims may be asked to pay “processing fees,” “release fees,” “insurance fees,” “verification fees,” “advance interest,” or “collateral deposits” before any loan is released.

Fourth, it may be an online lending app or page that operates under misleading branding, hides its true identity, or uses abusive debt collection practices while claiming to be SEC-registered.

Fifth, it may be a business using the appearance of lending to collect investments, deposits, or membership payments from the public without proper authority.

III. Why SEC Registration Alone Is Not Enough

A common misconception is that a business is automatically legitimate because it has an SEC registration number. That is not always true.

SEC registration generally means that an entity has been registered as a corporation, partnership, or other juridical entity. It does not necessarily mean that the entity is authorized to engage in lending activities, financing activities, investment-taking, deposit-taking, or other regulated financial services.

A legitimate lending company must generally have the proper authority to operate as a lending company under Philippine law. A legitimate financing company must likewise have proper authority to conduct financing business. A company that merely has a certificate of incorporation but no lending authority may not lawfully hold itself out as a lending company.

Therefore, when checking a lending company, verify both:

whether the entity exists as a registered corporation; and
whether it has authority to operate as a lending or financing company.

IV. Common Red Flags of Fake or Illegal Lending Companies

A lending company may be suspicious if it shows any of the following signs:

It claims to be SEC-registered but refuses to provide its full registered name, SEC registration number, certificate of authority number, office address, and official contact details.
It uses only a Facebook page, Messenger account, Telegram account, WhatsApp number, Viber number, or personal mobile number.
It asks for payment before loan release, such as “processing fee,” “notarial fee,” “insurance,” “tax,” “activation fee,” “verification fee,” or “release fee.”
It promises guaranteed approval without meaningful verification.
It uses the name or logo of a known bank, financing company, government agency, or lending company but communicates through unofficial channels.
It sends a certificate that appears altered, low-resolution, inconsistent, or missing verifiable details.
It pressures the borrower to pay immediately or threatens legal action, arrest, public shaming, barangay complaints, or employer notification.
It requires access to contacts, gallery, social media accounts, or other excessive personal data.
It threatens to message the borrower’s family, friends, employer, or contacts.
It imposes unclear, excessive, or hidden charges.
It refuses to provide a written loan agreement.
It uses abusive collection tactics, defamatory messages, or public humiliation.
It claims that nonpayment of an ordinary debt automatically results in imprisonment.
It uses a business name that is slightly different from the name appearing in SEC records.
It claims that an SEC certificate of incorporation alone is proof that it can legally lend money.

V. Relevant Philippine Laws and Regulations

Several laws may be relevant when dealing with a fake or abusive lending company.

A. Lending Company Regulation Act

The Lending Company Regulation Act governs lending companies in the Philippines. Lending companies are generally required to be organized and authorized in accordance with law before they may engage in lending activities. A company that lends money to the public without proper authority may be subject to regulatory action.

B. Financing Company Act

If the business is engaged in financing activities rather than ordinary lending, the Financing Company Act may apply. Financing companies are separately regulated and must comply with applicable licensing and operational requirements.

C. Revised Corporation Code

The Revised Corporation Code governs corporations, including the use of corporate names, registration, corporate powers, and acts beyond the corporation’s authority. A corporation that misrepresents its authority or acts outside its permitted business may face regulatory consequences.

D. Consumer Protection Rules

Borrowers are consumers of financial services. Misleading advertisements, unfair collection methods, hidden charges, and deceptive loan offers may raise consumer protection issues.

E. Data Privacy Act of 2012

Many abusive online lending operations involve the misuse of borrowers’ personal information. If a lending app, agent, or collector accesses contacts, sends threatening messages to third parties, posts personal details online, or processes personal data without lawful basis, the Data Privacy Act may be implicated.

F. Cybercrime Prevention Act

If the fake lending company uses online channels to commit fraud, identity theft, threats, harassment, libel, unauthorized access, or other cyber-related acts, the Cybercrime Prevention Act may be relevant.

G. Revised Penal Code

Depending on the facts, criminal offenses may include estafa, other forms of deceit, grave threats, unjust vexation, coercion, libel, falsification, or use of falsified documents.

H. Anti-Money Laundering Concerns

If the scheme involves large-scale fraud, suspicious fund movements, use of mule accounts, or organized financial scams, anti-money laundering concerns may arise.

VI. How to Verify Whether a Lending Company Is Legitimate

Before paying any fee, signing any document, or sending personal data, a borrower should verify the company.

A. Check the Exact Registered Name

Use the exact company name, not merely the brand name. Scammers often use a trade name that resembles a legitimate company. Even small differences matter. For example, “ABC Lending Corporation,” “ABC Loan Services,” and “ABC Financing Inc.” may refer to different entities.

B. Check Whether the Company Has SEC Registration

Verify whether the company exists in SEC records. A certificate of incorporation means the company exists as a juridical entity, but it is not enough to prove authority to lend.

C. Check Whether It Has a Certificate of Authority

For lending or financing activities, look for the proper certificate of authority or license. A company that cannot show its authority to operate as a lending company should be treated with caution.

D. Compare Contact Details

Compare the company’s claimed address, phone number, email, website, and social media pages with official records or official public advisories. Scammers often use fake pages with copied logos.

E. Check SEC Advisories

The SEC regularly issues advisories against unauthorized entities, illegal lenders, investment scams, and abusive online lending operators. If the company appears in an advisory, avoid dealing with it and consider filing a report.

F. Be Careful With “Proof” Sent by Chat

Documents sent through Messenger or email can be fabricated. A fake certificate may contain a real SEC number copied from another company. Always verify against official records, not merely screenshots.

VII. Evidence to Gather Before Reporting

A strong report depends on clear evidence. Preserve the following:

screenshots of the company’s page, website, app listing, advertisements, posts, and messages;
screenshots of the claim that the company is SEC-registered;
copies of any SEC certificate, business permit, loan agreement, promissory note, disclosure statement, or document sent to you;
names, phone numbers, email addresses, usernames, account names, QR codes, and payment details used by the company or its agents;
proof of payment, including bank transfer receipts, e-wallet receipts, remittance slips, reference numbers, account names, and account numbers;
call logs and recordings, if lawfully obtained;
text messages, chat messages, emails, and voice notes;
screenshots of threats, harassment, defamatory posts, or messages sent to your contacts;
app permissions requested by the lending app;
names of collectors, agents, or representatives;
dates and times of all communications;
the amount borrowed, amount received, amount demanded, interest rate, penalties, and fees;
identities of other victims, if available; and
a written timeline of events.

Do not edit screenshots in a way that changes their meaning. Keep original files whenever possible. Export conversations or back them up. If money was sent, immediately save transaction receipts and request official confirmation from the bank or e-wallet provider.

VIII. Where to Report a Fake SEC-Registered Lending Company

Depending on the facts, reports may be made to one or more agencies.

A. Securities and Exchange Commission

The SEC is the primary agency for corporate registration and regulation of lending and financing companies. Report the company to the SEC if it:

falsely claims to be SEC-registered;
operates as a lending or financing company without authority;
misuses another company’s SEC registration;
uses a fake certificate of incorporation or authority;
engages in abusive online lending activities;
conducts unauthorized investment-taking; or
violates SEC rules on lending or financing companies.

Your complaint should include the company name, alleged SEC number, certificate of authority number if any, website or page link, screenshots, payment proof, and a concise narrative.

B. National Privacy Commission

Report to the National Privacy Commission if the company or app misused your personal data. Examples include:

accessing your contacts without valid consent;
sending messages to your contacts about your debt;
threatening to post your personal information online;
using your photos without permission;
publicly shaming you;
collecting unnecessary personal data;
refusing to delete or correct your personal data; or
using personal information for harassment.

The complaint should include screenshots, the app name, permissions granted, privacy notices, messages sent to third parties, and proof that your personal data was misused.

C. Philippine National Police Anti-Cybercrime Group

Report to the PNP Anti-Cybercrime Group if the scheme involved online fraud, threats, identity theft, cyber libel, hacking, unauthorized account access, phishing, or other cybercrime.

D. National Bureau of Investigation Cybercrime Division

The NBI Cybercrime Division may also investigate online scams, identity misuse, cyber harassment, and related offenses.

E. Bangko Sentral ng Pilipinas

If the entity claims to be a bank, e-money issuer, remittance company, payment provider, or BSP-supervised financial institution, report the matter to the BSP. The BSP may be relevant if the company impersonates a bank or uses financial channels in a misleading way.

F. Department of Trade and Industry

If the issue involves deceptive sales practices, false advertising, or trade name concerns outside the SEC’s primary jurisdiction, the DTI may be relevant, especially for sole proprietorships or business names.

G. Bank, E-Wallet Provider, or Remittance Center

If you sent money, immediately report the transaction to the financial service provider. Ask whether the transaction can be frozen, reversed, flagged, or investigated. Provide the receiving account name, number, transaction date, amount, and reference number.

H. Barangay or Local Police

For immediate threats, harassment, coercion, or intimidation, a report may also be made to the barangay or local police. For cyber-related cases, preserve digital evidence and consider reporting directly to cybercrime authorities.

IX. How to Prepare the Complaint

A good complaint is factual, chronological, and evidence-based. It should not rely only on conclusions such as “they are fake” or “they are scammers.” Explain why.

A complaint should include:

your full name and contact details;
the name used by the lending company;
the company’s claimed SEC registration number or certificate of authority number;
the platform used, such as Facebook, website, app, email, SMS, Messenger, Telegram, Viber, or WhatsApp;
the date you first encountered the company;
the loan amount offered or applied for;
all fees requested or paid;
names and account details of payment recipients;
why you believe the company is fake or unauthorized;
whether the company used another entity’s registration;
whether threats or harassment occurred;
whether your personal data was misused;
what relief or action you are requesting; and
attached evidence.

The tone should be formal and direct. Avoid exaggeration. State only what you know, what you personally experienced, and what your documents show.

X. Sample Complaint Narrative

A borrower may use a narrative similar to the following:

I respectfully report a lending entity using the name “[Name of Entity]” which claims to be SEC-registered. I encountered the entity through [Facebook page/website/app/person] on [date]. The entity offered me a loan of PHP [amount] and represented that it was authorized to operate as a lending company. It sent me [describe documents] and claimed that its SEC registration number is [number, if any].

Before releasing the loan, the entity required me to pay [processing fee/insurance fee/release fee/etc.] in the amount of PHP [amount], which I paid through [bank/e-wallet/remittance] to [account name and number] on [date]. After payment, the loan was not released, and the entity demanded additional payments. The entity also [describe threats, harassment, misuse of personal data, impersonation, or other acts].

I believe the entity may be falsely claiming SEC registration, operating without proper authority, or impersonating a legitimate company because [state reasons]. Attached are screenshots, transaction receipts, conversations, documents, account details, and other evidence.

I respectfully request verification of the entity’s registration and authority, investigation of its activities, and appropriate action under applicable laws and regulations.

XI. What to Do If You Already Paid Money

If you already paid money to a fake lending company, act quickly.

First, stop sending additional money. Scammers often invent new charges to extract more payments.

Second, contact your bank, e-wallet provider, or remittance service immediately. Report the transaction as fraudulent and ask whether the receiving account can be flagged, frozen, or investigated.

Third, save all receipts and conversations. Do not delete messages even if they are embarrassing or threatening.

Fourth, report the matter to the SEC and, if online fraud occurred, to cybercrime authorities.

Fifth, if the scammer has your identification documents, monitor for identity theft. Consider notifying relevant institutions if your IDs, selfies, signatures, or bank details were submitted.

Sixth, if threats are made, save the threats and report them. Do not respond emotionally. Use calm, documented communications.

XII. What to Do If the Company Misused Your Contacts or Personal Data

Many online lending operators pressure borrowers by contacting relatives, friends, co-workers, or employers. This may raise serious privacy and harassment issues.

You should:

take screenshots of the messages sent to your contacts;
ask affected contacts to send you copies of the messages they received;
record the sender’s number, account, profile, or email address;
preserve proof that the lending app accessed your contacts;
uninstall the app only after preserving evidence, if safe to do so;
change passwords if you gave access to accounts;
revoke app permissions;
report the matter to the National Privacy Commission; and
include the privacy violation in your SEC or cybercrime complaint.

If the company posted defamatory statements, threats, or private information online, capture the post, URL, date, time, account name, and visible comments before it is deleted.

XIII. Are Borrowers Required to Pay a Fake Lending Company?

This depends on the facts.

If the borrower truly received money, there may still be a civil obligation to return what was received, even if the lender violated regulatory rules. However, illegal charges, excessive interest, penalties, harassment, and unauthorized practices may be challenged.

If the borrower did not receive any loan proceeds and only paid advance fees, the borrower may be a victim of fraud.

If the company is fake or unauthorized, the borrower should not ignore the situation. Instead, the borrower should preserve evidence, avoid further payments to suspicious accounts, and seek advice from the proper agency or a lawyer.

XIV. Can a Borrower Be Imprisoned for Nonpayment of a Loan?

As a general principle, nonpayment of debt alone is not a crime. The Philippine Constitution protects against imprisonment for debt. However, criminal liability may arise in separate circumstances, such as fraud, issuance of a worthless check, falsification, or other criminal acts.

Collectors who threaten automatic arrest or imprisonment merely because a borrower failed to pay a loan may be using misleading or abusive tactics.

XV. Difference Between Legitimate Collection and Harassment

A legitimate lender may demand payment, send reminders, negotiate settlement, file a civil case, or pursue lawful remedies. However, collection must be done within the bounds of law.

Improper or abusive conduct may include:

threats of violence;
public shaming;
contacting unrelated third parties unnecessarily;
posting the borrower’s personal information online;
using obscene, insulting, or defamatory language;
pretending to be a lawyer, police officer, prosecutor, court employee, or government agent;
threatening arrest without legal basis;
repeatedly calling at unreasonable hours;
using fake legal documents; or
misrepresenting the amount due.

Borrowers should document these acts and include them in complaints.

XVI. Impersonation of a Legitimate Company

Some scammers copy real lending companies. In that situation, the legitimate company may also be a victim.

If you suspect impersonation:

compare the contact information used by the scammer with the official details of the legitimate company;
contact the legitimate company through official channels only;
ask whether the page, agent, or transaction is authorized;
report the fake page to the platform;
report the impersonation to the SEC and cybercrime authorities; and
include evidence that the scammer used the real company’s name, logo, registration number, or documents.

Do not rely on phone numbers or links sent by the suspected scammer. Use independently verified contact details.

XVII. Fake SEC Certificates and Falsified Documents

A fake lending company may send documents that appear official. These may include:

certificate of incorporation;
certificate of authority;
business permit;
BIR certificate;
loan approval letter;
notarized-looking document;
fake court notice;
fake police blotter;
fake demand letter; or
fake government clearance.

Signs of falsification may include inconsistent fonts, wrong agency names, incorrect seals, misspellings, mismatched company names, suspicious signatures, altered dates, missing reference numbers, or blurry images.

Falsified documents should be preserved and reported. Do not alter them. If possible, keep the original file, not only a screenshot.

XVIII. Reporting Online Lending Apps

For online lending apps, gather additional evidence:

app name;
developer name;
app store link;
screenshots of app permissions;
privacy policy;
loan disclosure page;
terms and conditions;
repayment schedule;
amount disbursed;
deductions made before disbursement;
collection messages;
contact access evidence; and
names or numbers used by collectors.

Online lending apps are especially sensitive because they may collect personal data at scale. If the app accesses contacts, photos, location, device information, or messages beyond what is necessary, privacy concerns may arise.

XIX. Reporting Social Media Loan Scams

Many fake lenders operate through Facebook pages, groups, sponsored posts, Marketplace listings, Messenger, Telegram, or WhatsApp.

For social media scams, preserve:

page name;
profile URL;
group URL;
admin names;
post screenshots;
comments showing other victims;
chat history;
payment instructions;
names of agents;
profile photos used;
advertisements; and
dates and times.

Also report the page or account to the platform for impersonation, fraud, or scam activity.

XX. What Relief Can a Complainant Request?

A complainant may request several forms of action, depending on the agency and facts:

verification of registration and authority;
investigation of unauthorized lending;
issuance of an advisory against the entity;
takedown or coordination with platforms;
administrative sanctions;
referral for criminal investigation;
assistance regarding abusive collection practices;
data privacy investigation;
preservation of evidence;
action against fake or impersonating accounts;
freezing or investigation of receiving financial accounts, where legally available; and
guidance on further remedies.

Regulatory agencies do not always recover money directly for victims, but their findings may support criminal, civil, administrative, or platform-based action.

XXI. Civil, Criminal, and Administrative Remedies

A. Administrative Remedies

Administrative remedies may involve complaints before the SEC, NPC, BSP, or other agencies. These may result in warnings, penalties, revocation of authority, cease-and-desist measures, advisories, or other regulatory action.

B. Criminal Remedies

Criminal remedies may be available where there is fraud, falsification, threats, cybercrime, identity theft, libel, coercion, or other punishable acts. Complaints may be filed with law enforcement or prosecutors, depending on the case.

C. Civil Remedies

Civil remedies may include recovery of money, damages, injunctions, or other court relief. A lawyer can help assess whether a civil case is practical based on the amount involved, evidence, identity of the respondent, and recoverability.

XXII. Practical Safety Tips for Borrowers

Before applying for a loan, borrowers should observe the following precautions:

never pay advance fees before loan release;
verify SEC registration and lending authority;
deal only with official websites, offices, apps, or verified channels;
avoid lenders that pressure you to act immediately;
do not send IDs, selfies, signatures, or bank details to suspicious pages;
do not allow unnecessary app permissions;
read the loan agreement and disclosure statement;
check interest, penalties, fees, and due dates;
keep copies of all documents;
avoid offers that sound too easy or guaranteed;
confirm whether the lender is authorized to operate;
be cautious of agents using personal accounts for payment; and
report suspicious lenders early.

XXIII. Special Issues Involving “Processing Fees”

A major sign of a loan scam is the demand for advance payment before release of proceeds. The scammer may say the fee is required for insurance, tax, collateral, verification, anti-money laundering clearance, notarial processing, or release activation.

In legitimate lending transactions, fees and charges should be properly disclosed and should not be used as a deceptive device to extract money from applicants. If a company repeatedly asks for additional payments before releasing a loan, the applicant should stop paying and report the matter.

XXIV. Special Issues Involving Threats to File a Case

A lender may lawfully pursue legal remedies if a valid debt exists. However, fake lenders often use legal threats to frighten borrowers. They may send fake subpoenas, fake warrants, fake court orders, or fake notices from invented law offices.

A borrower should remember:

a real case follows formal legal procedure;
police do not arrest people merely because of ordinary unpaid debt;
a collector cannot simply declare a borrower criminally liable;
court documents can be verified with the issuing court;
lawyers must identify themselves properly; and
threats should be preserved as evidence.

If a supposed legal document appears suspicious, verify it independently.

XXV. How to Write a Formal Complaint

A formal complaint may follow this structure:

Subject: Complaint Against [Name of Entity] for False Claim of SEC Registration / Unauthorized Lending / Online Lending Abuse

Body:

introduction of the complainant;
identification of the complained-of entity;
summary of the loan offer or transaction;
details of the false SEC registration claim;
details of payments made;
details of non-release of loan or abusive collection;
details of privacy violations, if any;
list of attached evidence;
request for investigation and appropriate action; and
contact details.

The complaint should be signed and dated. Attachments should be labeled clearly.

XXVI. Sample Formal Complaint

Subject: Complaint Against [Name of Lending Entity] for Possible False SEC Registration Claim and Unauthorized Lending

Dear Sir/Madam:

I respectfully file this complaint against [Name of Entity], which represented itself to me as an SEC-registered lending company.

On [date], I encountered the entity through [platform]. It offered me a loan in the amount of PHP [amount]. The entity claimed that it was registered with the Securities and Exchange Commission and sent me [certificate/registration number/document/screenshot]. It instructed me to pay PHP [amount] as [type of fee] before the loan could be released.

On [date], I paid the amount through [bank/e-wallet/remittance] to [account name/account number/reference number]. Despite payment, the loan was not released. The entity then demanded additional payment for [reason]. I later noticed several suspicious circumstances, including [state reasons, such as mismatched company name, unofficial account, fake certificate, refusal to provide office address, or use of another company’s registration].

The entity also [describe harassment, threats, or privacy violations, if applicable].

Attached are copies of my evidence, including screenshots of conversations, the alleged SEC document, payment receipts, account details, advertisements, and other relevant materials.

I respectfully request verification of the entity’s registration and authority to operate as a lending company, investigation of its activities, and appropriate action under applicable laws and regulations.

Thank you.

Respectfully, [Name] [Address, optional] [Mobile Number] [Email Address] [Date]

XXVII. Frequently Asked Questions

1. Is an SEC registration number proof that a lender is legitimate?

Not by itself. SEC corporate registration only proves that an entity may exist as a registered juridical entity. It does not automatically prove that the entity is authorized to operate as a lending company.

2. What if the SEC number is real?

A real number may have been copied from another company. Verify whether the person or page you are dealing with is actually connected to the registered company.

3. Should I pay a release fee before receiving the loan?

Be extremely cautious. Advance-fee demands are a common sign of lending scams.

4. What if the company threatens to post my photo or message my contacts?

Preserve evidence and report the matter to the National Privacy Commission and cybercrime authorities. This may involve privacy violations, harassment, or cyber-related offenses.

5. What if I borrowed money from an unauthorized lender?

If you received money, there may still be civil issues regarding repayment. However, unauthorized lending, illegal charges, abusive collection, and privacy violations may be reported. Seek legal advice for your specific situation.

6. Can I report even if I did not lose money?

Yes. You may report suspicious entities, false claims of registration, impersonation, or abusive practices even before money is lost.

7. Can I report anonymously?

Some agencies may accept tips or reports, but formal complaints usually require complainant information, especially if investigation or legal action is needed. Anonymous reports may be harder to act on.

8. Should I delete the lending app?

Preserve evidence first. Take screenshots of the app, permissions, loan terms, messages, and account details. Then revoke permissions or uninstall if necessary for safety.

9. What if my ID was sent to the fake lender?

Monitor for identity theft. Preserve proof that you sent the ID. Consider reporting the incident and informing relevant institutions if there is risk of misuse.

10. Can the SEC recover my money?

The SEC may investigate and take regulatory action, but recovery of money may require separate action through law enforcement, banks, prosecutors, or courts, depending on the facts.

XXVIII. Checklist Before Filing a Report

Before filing, prepare:

full name of the lending company or page;
claimed SEC registration number;
claimed certificate of authority number;
screenshots of advertisements and claims;
screenshots of conversations;
copies of documents sent;
proof of payment;
payment recipient details;
loan amount and fees;
timeline of events;
threats or harassment evidence;
privacy violation evidence;
app name and permissions, if applicable;
contact details of agents or collectors; and
your requested action.

XXIX. Conclusion

Fake SEC-registered lending companies exploit the public’s trust in official registration. In the Philippines, borrowers should understand that SEC incorporation is not the same as authority to operate as a lending company. A legitimate lender should be verifiable, transparent, properly authorized, and compliant with lending, privacy, consumer protection, and collection rules.

Victims should act quickly: stop paying suspicious fees, preserve evidence, verify the company’s authority, report to the proper agencies, notify banks or e-wallet providers, and seek legal assistance when necessary. The stronger the documentation, the better the chance that regulators, law enforcement, and financial institutions can act effectively.

The safest rule is simple: do not rely on screenshots, certificates, or claims sent by strangers online. Verify independently before sending money, documents, or personal data.