Online lending scams in the Philippines can move fast: one day you are checking a loan app, and the next day you may be receiving threats, seeing your contacts messaged, or being pressured to pay a debt you do not recognize. The most important things are to preserve evidence, stop further access to your data, and report the incident to the correct Philippine agency. This guide explains where to report a suspicious online lending scam, what evidence to prepare, what laws may apply, and what usually happens after you file a complaint.

What Counts as a Suspicious Online Lending Scam?

A suspicious online lending scam is not limited to a fake loan app. It can include any online lending activity that uses deception, harassment, unauthorized data access, or illegal collection tactics.

Common examples include:

A lending app that is not recorded or authorized by the Securities and Exchange Commission (SEC).
A supposed lender asking for “processing fees,” “verification fees,” or “unlocking fees” before releasing any loan.
A loan app that accesses your contacts, photos, messages, or social media accounts without proper basis.
Collectors threatening to post your face, ID, or personal details online.
Collectors messaging your family, employer, co-workers, or friends to shame you.
A lender claiming you made someone a “co-maker” or “guarantor” when that person never agreed.
Threats of arrest, barangay blotter, court cases, or police action for non-payment of an ordinary loan.
Fake law office, fake sheriff, fake NBI, fake police, or fake court messages.
Apps offering loans under a name different from the SEC-registered company.

A real debt may still exist even if the collector is abusive. But having a debt does not give a lender the right to harass you, misuse your data, threaten you, or deceive your contacts.

First Things to Do Before You Report

Before filing any complaint, secure your evidence and accounts. Many victims lose useful proof because they delete chats, uninstall apps too early, or argue with collectors until messages disappear.

Take screenshots immediately. Capture the app name, logo, Google Play or App Store page, loan terms, collector messages, phone numbers, bank or e-wallet accounts, threats, and messages sent to your contacts.
Record dates and times. Write a simple timeline: when you installed the app, when you applied, how much was supposedly approved, how much was released, how much was deducted, and when the harassment started.
Save transaction proof. Keep GCash, Maya, bank transfer, remittance, or payment receipts. Include reference numbers.
Do not send more money just because of threats. Scammers often demand repeated “fees” or “settlement payments” without issuing proper receipts or updated statements.
Revoke app permissions. On your phone, remove the app’s permission to access contacts, photos, camera, microphone, location, and storage. Then uninstall the app after you have preserved evidence.
Change important passwords. Prioritize email, e-wallet, bank, social media, and cloud storage accounts. Turn on two-factor authentication.
Tell close contacts what happened. A short warning helps prevent them from being tricked by messages pretending you made them a co-maker or emergency contact.
Report ongoing threats quickly. If there are threats of physical harm, blackmail, identity theft, or unauthorized use of your bank or e-wallet, report to law enforcement and the affected financial institution immediately.

Which Government Agency Should You Report To?

Different agencies handle different parts of an online lending scam. Filing with the right office saves time.

Problem	Main agency to report to	Best for
Unauthorized or abusive lending company or online lending platform	SEC	Lending company regulation, unfair debt collection, unrecorded online lending platforms
Accessing contacts, public shaming, posting personal data, data misuse	National Privacy Commission (NPC)	Data privacy violations
Online scam, threats, identity theft, hacking, cyberlibel, fake accounts	PNP Anti-Cybercrime Group or NBI Cybercrime Division	Criminal investigation
Ongoing online scam needing quick reporting	CICC / Inter-Agency Response Center	1326 anti-scam hotline and referral
Unauthorized bank, e-wallet, payment, or remittance transaction	BSP-supervised financial institution first, then BSP if unresolved	Bank/e-wallet complaints
Scam text messages or abusive mobile numbers	NTC	Text scams, spam, mobile number complaints

The SEC’s own complaint guidance says complaints involving lending and financing companies may raise violations of the Lending Company Regulation Act, Financing Company Act, and Truth in Lending Act, and that data privacy issues may be endorsed to the NPC. The SEC also requires a completed complaint form, evidence, and a valid government-issued ID. (SEC Appointment System)

Legal Basis: Why These Acts May Be Illegal

SEC Regulation of Lending Companies

Under Republic Act No. 9474, or the Lending Company Regulation Act of 2007, a lending company must generally be a stock corporation and must have authority from the SEC before conducting lending business. The SEC explains that no lending company may conduct business unless granted authority to operate by the SEC. (SEC Appointment System)

A lending company may charge interest and fees agreed with the borrower, but the agreement must comply with the Truth in Lending Act, Republic Act No. 3765, which requires clear disclosure of finance charges and loan terms. The SEC also lists disclosure statement violations as a complaint issue for lending and financing companies. (SEC Appointment System)

Unfair Debt Collection Practices

The SEC’s Memorandum Circular No. 18, Series of 2019 prohibits unfair debt collection practices by financing and lending companies. The SEC lists this circular among its official issuances for lending and financing companies. (SEC Appointment System)

Unfair collection may include threats, false representations, deceptive means, harassment, and improper disclosure to third parties. The Credit Information Corporation also notes that the SEC circular prohibits unfair debt collection practices such as threats to take action that cannot legally be taken and false or deceptive means to collect a debt. (Credit Information Corporation (CIC))

Data Privacy Violations

The Data Privacy Act of 2012, Republic Act No. 10173, protects personal information in government and private information systems. In online lending cases, privacy issues often involve:

Accessing a borrower’s contact list without valid consent.
Messaging third parties about the borrower’s debt.
Posting personal information online.
Using IDs, photos, or personal details for harassment.
Processing data beyond what is necessary for the loan.

The NPC has previously found online lending-related conduct serious enough to recommend prosecution. In one online lending case, the NPC said complaints included use of phonebook contacts to contact third persons, disclosure of personal information to friends, relatives, co-workers, and superiors, and use of personal information to harass, threaten, or coerce borrowers. (National Privacy Commission)

Cybercrime and Criminal Offenses

The Cybercrime Prevention Act of 2012, Republic Act No. 10175, may apply when the scam or harassment happens through a computer system, phone, app, social media, email, or messaging platform.

Possible criminal issues include:

Estafa under Article 315 of the Revised Penal Code, if deception was used to obtain money.
Grave threats under Article 282 of the Revised Penal Code, if there are serious threats of harm.
Grave coercions under Article 286, if force, intimidation, or threats are used to compel someone to do something against their will.
Unjust vexation under Article 287, for persistent harassment without lawful purpose.
Libel or cyberlibel, if defamatory accusations are posted or sent online.
Computer-related identity theft or fraud, if your identity, account, number, or personal data is used unlawfully.

In Disini v. Secretary of Justice, the Supreme Court reviewed the Cybercrime Prevention Act and upheld important parts of the law while striking down provisions that violated constitutional rights. It remains a key case when discussing Philippine cybercrime enforcement. (Lawphil)

Financial Consumer Protection

Republic Act No. 11765, the Financial Products and Services Consumer Protection Act, recognizes financial consumers’ rights to fair treatment, disclosure and transparency, protection against fraud and misuse of assets, data privacy, and timely complaint handling. It also gives financial regulators such as the BSP and SEC powers over supervised financial service providers. (Supreme Court E-Library)

This is relevant when the online lending issue involves a regulated financial product, abusive market conduct, unreasonable charges, or failure to handle consumer complaints.

Step-by-Step: How to Report a Suspicious Online Lending Scam

1. Check Whether the Lender or App Is Registered or Recorded

Start by checking the SEC’s official lending and financing company resources.

Look for:

The company’s registered corporate name.
The app or platform name.
The Certificate of Authority number, if shown.
Whether the company is listed as suspended or revoked.
Whether the online lending platform is recorded with the SEC.

Be careful: scammers often copy the name or logo of a legitimate company. A matching name alone is not enough. Compare the app developer, website, contact details, loan documents, and payment account names.

2. File a Complaint With the SEC for Lending-Related Violations

File with the SEC if the issue involves:

An unauthorized lending company.
A recorded or registered lender using abusive collection tactics.
Lack of disclosure statement.
Misleading advertisements.
Excessive or hidden charges.
A loan app operating under a different or suspicious name.
A financing or lending company violating SEC rules.

The SEC complaint page requires the complainant to:

Fill out the SEC complaint form completely and accurately.
Attach evidence.
Submit one complaint form per respondent company.
Provide a valid government-issued ID. (SEC Appointment System)

You can file by email through the SEC’s Financial and Lending Company Division complaint email listed in official BSP consumer protection resources, flcd_complaints@sec.gov.ph, or through the SEC complaint channels stated on the SEC website. The SEC also lists a walk-in filing option and says the email subject should follow this format: COMPLETE NAME_RESPONDENT COMPANY_SUBJECT OF COMPLAINT. (SEC Appointment System)

After filing, the SEC evaluates the complaint and may send a copy to the lending or financing company for its answer or comment. The SEC complaint page states that the company is given 10 days from receipt to answer or comment. (SEC Appointment System)

3. File a Complaint With the NPC for Data Privacy Abuse

Report to the National Privacy Commission if the lender or collector:

Accessed your contacts without proper consent.
Texted or called people in your contact list.
Posted your ID, face, address, employer, or debt details.
Sent defamatory messages to your relatives or workplace.
Used your personal data for a purpose unrelated to the loan.
Refused to delete or correct unlawfully processed data.

The NPC says a person has the right to file a complaint if personal information has been misused, maliciously disclosed, improperly disposed of, or if data privacy rights have been violated. (National Privacy Commission)

For filing, the NPC provides a complaint process and complaint-assisted form. Its guidance says complaints should include the completed form or verified complaint, copies of evidence, and witness statements when available. (National Privacy Commission)

Practical evidence for an NPC complaint includes:

Screenshots of permissions requested by the app.
Screenshots showing collectors contacted your phone contacts.
Messages sent to relatives, employer, co-workers, or friends.
Public posts, group chats, comments, or edited photos.
Privacy policy and loan terms shown in the app.
Proof that you did not authorize the specific use or disclosure.
Your valid ID.

4. Report Criminal Conduct to PNP-ACG or NBI Cybercrime Division

Report to law enforcement if the case involves:

Threats of harm.
Blackmail or sextortion.
Identity theft.
Fake police, NBI, court, or law office messages.
Hacking, phishing, or account takeover.
Fake lending app that took money from you.
Public defamatory posts or cyberlibel.
Repeated harassment using multiple numbers or accounts.

The NBI has a Cybercrime Division and lists ccd@nbi.gov.ph as its Cybercrime Division email. (National Bureau of Investigation) The NBI Citizen’s Charter for computer crime victims also describes complaint filing by filling out the complaint form and submitting it to the proper personnel. (National Bureau of Investigation)

For PNP cybercrime concerns, the Credit Information Corporation’s consumer guidance lists the Philippine National Police Anti-Cybercrime Group channels as acg@pnp.gov.ph and pnpacgcfcu@gmail.com for data privacy-related concerns involving lender harassment. (Credit Information Corporation (CIC))

For urgent or ongoing scam situations, you may also call the government anti-scam hotline 1326. ScamWatch Pilipinas lists 1326 and alternative I-ARC numbers, while the Philippine News Agency reported that 1326 is a 24/7 hotline for reporting scams including phishing, text, email, caller ID spoofing, romance, investment, and other online scams. (ScamWatch Pilipinas)

5. Report Bank or E-Wallet Transactions Immediately

If money was sent through a bank, e-wallet, remittance center, or payment platform:

Report the transaction to the bank or e-wallet first.
Ask for a ticket number.
Request account freezing or transaction tracing if available.
Preserve all reference numbers.
Escalate to BSP if the provider’s response is unsatisfactory or delayed.

The BSP says consumers may escalate unresolved complaints against BSP-supervised financial institutions through the BSP Online Buddy (BOB) and other consumer assistance channels. The BSP also says email or postal complaints should include the complaint summary, requested resolution, contact details, complaint filed with the financial institution, the institution’s reply if any, and supporting documents. (Bangko Sentral ng Pilipinas)

BSP consumer resources list consumeraffairs@bsp.gov.ph, direct lines, and BOB channels for unresolved complaints involving banks, e-money issuers, payment operators, remittance businesses, and other BSP-supervised institutions. (Bangko Sentral ng Pilipinas)

6. Report Scam Texts or Abusive Mobile Numbers to the NTC

If the harassment or scam comes through text messages or mobile calls, report the number to the National Telecommunications Commission.

NTC-related public guidance has stated that scam or spam text complaints may be reported through NTC channels, including hotline 1682 and NTC complaint pages. (Philippine Information Agency)

Prepare:

Screenshot of the message showing the mobile number.
Date and time received.
Your name and contact details.
Your valid ID.
Any link, account number, or payment demand in the message.

This does not replace a criminal complaint if there are threats, extortion, identity theft, or fraud. It helps authorities and telcos identify and block abusive numbers.

Evidence Checklist for Online Lending Scam Reports

Evidence	Why it matters
Screenshots of app page, app name, developer, and logo	Helps identify the platform and possible impersonation
Loan agreement, disclosure statement, or promissory note	Shows terms, charges, and lender identity
Cash release proof	Shows actual amount received versus amount charged
Payment receipts	Shows what you already paid and to whom
Collector messages and call logs	Shows harassment, threats, frequency, and numbers used
Messages sent to your contacts	Proves third-party disclosure and possible privacy violation
Social media posts or group chat screenshots	Supports cyberlibel, public shaming, or data misuse
Valid government ID	Usually required by agencies to verify complainant identity
Timeline of events	Helps investigators understand the sequence clearly
Witness statements from contacts messaged by collectors	Strengthens privacy and harassment complaints

Do not edit screenshots except to redact sensitive information for public sharing. For agency filing, keep original copies when possible.

Sample Complaint Timeline You Can Prepare

A simple chronology is often more useful than a long emotional narrative. You can write it like this:

Date	What happened	Proof
January 5	Installed loan app and submitted ID/selfie	Screenshot of app and permissions
January 5	App approved ₱5,000 but released only ₱3,200	GCash receipt and app screenshot
January 9	Collector demanded ₱7,500	SMS screenshot
January 10	Collector messaged my employer and sister	Screenshots from employer and sister
January 10	Collector threatened to post my ID online	Messenger screenshot
January 11	I reported to SEC/NPC/PNP/NBI	Complaint acknowledgment

This makes it easier for the SEC, NPC, PNP, NBI, or BSP to evaluate your complaint.

Common Mistakes That Can Weaken Your Complaint

Deleting the App Too Early

Uninstalling may be necessary for security, but first take screenshots of the app name, profile, loan details, permissions, privacy policy, and in-app messages.

Paying Without a Receipt or Written Breakdown

If you decide to pay a legitimate debt, ask for a written statement of account and official payment channel. Scammers often use personal GCash or Maya accounts and then deny receiving payment.

Filing With Only One Agency When Several Violations Exist

One case can involve several agencies. For example:

SEC for unauthorized lending or unfair collection.
NPC for contact list access and public shaming.
PNP/NBI for threats, identity theft, or cybercrime.
BSP for e-wallet or bank transaction issues.
NTC for scam numbers.

Posting Accusations Publicly Without Proof

Victims understandably want to warn others, but posting names, photos, and accusations online can create separate defamation issues. It is safer to report to official agencies and preserve evidence.

Ignoring Real Court Papers

Scammers often send fake legal threats. But if you receive a real subpoena, prosecutor’s notice, summons, or court order, check the issuing office directly. Real court and prosecutor notices usually contain case numbers, office addresses, names of parties, and official signatures or seals.

Special Notes for OFWs and Foreigners

You can report many online lending scams from abroad through email or online channels, especially with the SEC, NPC, BSP, NBI, and CICC. The main practical issue is document verification.

For Filipinos abroad and foreigners:

Use a clear copy of your passport or government-issued ID.
If an affidavit is required, sign it before the Philippine Embassy or Consulate when possible.
If signed before a foreign notary, the document may need an apostille if the country is a party to the Apostille Convention, or consular authentication if not.
Keep Philippine phone numbers, e-wallet accounts, and bank records active while the complaint is pending if they contain evidence.
If your contacts in the Philippines were harassed, ask them to send screenshots and short signed statements.

Foreigners dealing with Philippine online lending apps should also preserve proof of Philippine connection: app used in the Philippines, Philippine company name, Philippine bank/e-wallet account, Philippine phone number, or messages sent to people in the Philippines.

What Usually Happens After You File

Agency	What may happen	Practical timeline
SEC	Evaluation, forwarding to company for comment, possible administrative action	SEC says the company may be given 10 days from receipt to answer/comment
NPC	Evaluation of complaint, possible order, investigation, or referral	Depends on completeness of complaint and docket load
PNP/NBI	Complaint intake, assessment, possible investigation or referral for inquest/preliminary investigation	Faster if evidence is complete and suspect/account details are clear
BSP	Referral to financial institution or consumer assistance handling	BSP says email or postal complaints may be evaluated within seven banking days from receipt
NTC	Assessment of scam number report and coordination with telecom channels	Varies by region and completeness of report
CICC / 1326	Intake and referral for online scam concerns	Useful for urgent reporting and coordination

Administrative complaints do not always result in immediate refund or cancellation of debt. Criminal complaints do not always move quickly if the suspect uses fake names, mule accounts, or disposable SIMs. But a complete complaint creates an official record, helps regulators identify patterns, and gives you proof that you acted promptly.

Frequently Asked Questions

Where do I report an online lending scam in the Philippines?

Report lending-related violations to the SEC, data privacy abuse to the NPC, cybercrime or threats to the PNP Anti-Cybercrime Group or NBI Cybercrime Division, bank or e-wallet issues to the provider and then BSP if unresolved, and scam texts or abusive numbers to the NTC.

Can I report an online lending app even if I borrowed money?

Yes. Borrowing money does not remove your rights. A lender may collect a valid debt using lawful methods, but it cannot use threats, deception, public shaming, unauthorized access to contacts, or unfair debt collection practices.

Can I be arrested for not paying an online loan?

Non-payment of an ordinary debt is generally a civil matter. You cannot be jailed simply because you failed to pay a loan. However, separate criminal issues may arise if there was fraud, falsification, identity theft, or issuance of bouncing checks. Fake “police arrest” threats from collectors should be documented and reported.

What if the loan app messaged my contacts?

This is a serious red flag. Save screenshots from your contacts, including the sender number, message content, and date. Report the lending issue to the SEC and the data privacy issue to the NPC. If the messages contain threats or defamatory statements, report to PNP-ACG or NBI Cybercrime Division as well.

What if the app is not on the SEC list?

If the app is not recorded or the company cannot be verified, treat it as suspicious. Preserve evidence and report it to the SEC. If money was taken through deception, or if threats and identity misuse are involved, report to cybercrime authorities too.

Should I still pay if the lender is abusive?

A valid loan does not automatically disappear because the collector behaved illegally. But do not pay random personal accounts without a statement of account, official receipt, and clear confirmation of the creditor’s identity. For disputed, inflated, or suspicious claims, keep records and report the matter.

Can the SEC cancel my loan or erase my debt?

The SEC’s complaint guidance states that it cannot change loan contract terms, declare an interest rate void for being excessive, declare a loan contract void, or cancel or settle your loan obligation through the complaint process. (SEC Appointment System) The SEC can, however, evaluate regulatory violations and pursue administrative action when warranted.

How do I report if I am outside the Philippines?

You may file by email or online where available. Use a passport or valid ID, attach screenshots and transaction records, and prepare a notarized or consularized affidavit if required. If the affidavit is signed abroad, check whether apostille or Philippine consular authentication is needed.

What if the scammer used GCash, Maya, or a bank account?

Report immediately to the e-wallet or bank and request freezing, tracing, or investigation if available. Save the ticket number. If the provider does not resolve the issue, escalate to the BSP consumer assistance mechanism through BOB or BSP’s listed consumer channels.

Is public shaming by online lending collectors illegal?

It may violate SEC rules on unfair debt collection, the Data Privacy Act, the Revised Penal Code, and the Cybercrime Prevention Act, depending on the facts. Publicly posting a borrower’s photo, ID, contact details, alleged debt, or insults can create privacy, harassment, and defamation issues.

Key Takeaways

Preserve evidence first: screenshots, receipts, app details, messages, call logs, and a timeline.
Report lending violations to the SEC and privacy violations to the NPC.
Report threats, identity theft, fake legal messages, hacking, and online fraud to PNP-ACG or NBI Cybercrime Division.
Report urgent online scams through 1326 and payment issues to your bank/e-wallet, then BSP if unresolved.
A real debt does not justify harassment, public shaming, threats, or unauthorized contact-list access.
The stronger your documentation, the better your chances of getting meaningful action from regulators or law enforcement.