If an online lending app is harassing you, hiding charges, using your contact list, threatening public shame, or operating without proper SEC authority, you can report it to the Securities and Exchange Commission (SEC) in the Philippines. The strongest complaints are specific, evidence-based, and filed with the correct agency: SEC for lending and financing violations, National Privacy Commission (NPC) for misuse of personal data, and NBI or PNP Anti-Cybercrime for threats, scams, identity misuse, or online harassment.

What Makes an Online Lending App an SEC Problem?

An online lending app is usually not just “an app.” In Philippine regulation, it is commonly an Online Lending Platform (OLP) used by a lending company (LC) or financing company (FC) to offer loans through a mobile app, website, or other fintech-enabled system. SEC Memorandum Circular No. 3, Series of 2022 defines OLPs as mobile lending applications, websites, and other fintech-enabled programs or systems where the services and products of lending or financing companies are made available.

The SEC becomes involved because lending and financing companies are regulated businesses. Under Republic Act No. 9474, or the Lending Company Regulation Act of 2007, a lending company must be a corporation and cannot conduct lending business without SEC authority. RA 9474 also gives the SEC power to issue regulations, require reports, inspect records, and impose administrative sanctions such as fines, suspension, or revocation of authority to operate. (Supreme Court E-Library)

Financing companies are likewise regulated under Republic Act No. 8556, or the Financing Company Act of 1998, which gives the SEC enforcement authority over financing companies, except where BSP supervision applies. RA 8556 also prohibits persons or entities from holding themselves out as financing companies unless authorized. (Bangko Sentral ng Pilipinas)

In simple terms: you report to the SEC when the problem concerns the lender’s authority to operate, its app registration or recording, loan disclosures, interest and fees, unfair collection practices, or market conduct as a financial service provider.

Common SEC Violations by Online Lending Apps

Possible violation	What it looks like in real life	Main legal or regulatory basis
Operating without SEC authority	The app lends money but cannot show a valid SEC Registration Number and Certificate of Authority	RA 9474; RA 8556
Unrecorded or misleading OLP	The app name is different from the SEC-registered company, or the app is not on the SEC’s recorded OLP list	SEC OLP regulations and advisories
Hidden or confusing loan charges	The app shows “low interest” but deducts large processing, service, verification, or transfer fees	RA 3765, Truth in Lending Act
Excessive interest or fees on small short-term loans	A ₱3,000 loan becomes ₱6,000 or more very quickly because of interest, fees, and penalties	BSP Circular No. 1133; SEC MC No. 3, s. 2022
Harassment and unfair debt collection	Threats, insults, repeated intimidation, shaming, contacting relatives or coworkers	SEC MC No. 18, s. 2019; RA 11765
Contact-list misuse	The app accesses or messages people who are not guarantors	NPC rules; 2026 DICT-NPC-SEC advisory
False threats of arrest or criminal case	Collector says you will be jailed immediately for nonpayment of a civil loan	Constitution; possible unfair collection practice
Misrepresentation	Collector pretends to be from a court, police, NBI, barangay, or law office without basis	SEC unfair collection rules; possible criminal issue

Your Key Rights as a Borrower or Financial Consumer

Philippine law does not require borrowers to tolerate abuse just because they owe money. A valid debt may still be collected, but collection must be lawful.

Under RA 11765, the Financial Products and Services Consumer Protection Act, financial consumers have rights to equitable and fair treatment, disclosure and transparency, protection against fraud and misuse, data privacy and protection, and timely handling and redress of complaints. The law also covers digital financial products and services. (Supreme Court E-Library)

Under RA 3765, the Truth in Lending Act, borrowers must be protected from lack of awareness of the true cost of credit. The law covers finance charges such as interest, fees, service charges, discounts, and other charges incident to the extension of credit. It requires disclosure of key loan costs before or at the time the credit transaction is made. (Supreme Court E-Library)

For covered small loans, BSP Circular No. 1133 and SEC MC No. 3, Series of 2022 impose ceilings on certain unsecured, general-purpose loans not exceeding ₱10,000 with a loan tenor of up to four months. The caps include 6% nominal interest per month, 15% effective interest rate per month including applicable fees except late-payment penalties, a 5% monthly cap on late-payment penalties, and a 100% total cost cap on the total amount borrowed.

The Constitution also matters. Article III, Section 20 of the 1987 Philippine Constitution states that no person shall be imprisoned for debt or non-payment of a poll tax. This does not erase a valid loan, and it does not protect fraud, but it means a collector should not use “jail” as a scare tactic for ordinary nonpayment of a civil debt. (Supreme Court E-Library)

What to Do Before Filing the SEC Complaint

1. Identify the real company behind the app

Online lenders often use app names that are different from their corporate names. Before filing, collect:

App name as shown in Google Play, Apple App Store, APK site, Facebook page, SMS, or website
Corporate name, if shown
SEC Registration Number
Certificate of Authority number
App package name, website link, or app store listing
Customer service number, collector number, Viber/Telegram/WhatsApp account, or email address
Screenshots of loan terms and collection messages

The SEC has advised the public to verify lending companies, financing companies, and recorded online lending platforms using SEC lists and official verification tools; older SEC FOI responses also point borrowers to the SEC lists of registered lending companies, registered financing companies, and recorded OLPs. (www.foi.gov.ph)

2. Preserve evidence before uninstalling the app

Do not rely on memory. Many abusive apps disappear, change names, delete pages, or shift from app stores to APK files.

Save:

Screenshots of the app home screen and loan offer
Loan agreement, disclosure statement, repayment schedule, and transaction history
Proof of disbursement, such as GCash, Maya, bank transfer, or remittance records
Proof of payment, including reference numbers
Screenshots of interest, processing fees, penalties, and due dates
Call logs showing frequency and time of calls
Text messages, chat messages, voice notes, and threats
Screenshots from relatives, coworkers, or friends who were contacted
App permission screenshots showing contact, camera, location, gallery, or storage access
App store listing, developer name, reviews, and download page

For messages, capture the phone number, date, time, full message, and sender profile. For calls, take screenshots of the call log and write a short note of what was said immediately after the call.

3. Separate SEC issues from privacy and cybercrime issues

The same incident may require more than one complaint.

Problem	Main office to report to
Unfair collection, abusive lending conduct, unrecorded OLP, excessive charges	SEC Financing and Lending Companies Department
Contact-list harvesting, messaging non-guarantors, excessive app permissions, privacy violation	National Privacy Commission
Threats, identity misuse, online harassment, fraud, fake police/court/NBI messages	NBI Cybercrime Division or PNP Anti-Cybercrime Group
Unauthorized bank, e-wallet, or BSP-supervised institution issue	BSP consumer assistance channels

The 2026 joint DICT-NPC-SEC advisory specifically tells the public to report unfair debt collection practices to the SEC Financing and Lending Companies Department through the SEC iMessage system and identifies separate channels for DICT, NBI Cybercrime, and PNP Anti-Cybercrime for other forms of harassment, threats, frauds, or scams.

How to Report an Online Lending App to the SEC

Step 1: Prepare a short written complaint

Your complaint should be factual and chronological. Avoid insults. The SEC needs to quickly see what law or rule may have been violated.

A useful format is:

Your details Full name, mobile number, email address, city/province, and whether you are the borrower, reference, guarantor, or affected third party.
Respondent details App name, company name, SEC number if known, Certificate of Authority number if known, website, app store link, contact numbers, and collector names.
Loan details Date of loan, amount applied for, amount actually received, fees deducted, due date, amount demanded, payments made, and current disputed amount.
Violation summary Examples: unrecorded OLP, no disclosure statement, excessive charges, harassment, contacting non-guarantors, threats, false claim of arrest, public shaming.
Timeline List events by date and time. Example: “June 10, 2026, 8:14 p.m. — collector texted my sister even though she was not my guarantor.”
Evidence list Attach screenshots and label them clearly: “Annex A — Loan Offer,” “Annex B — Disclosure Statement,” “Annex C — Threatening SMS,” and so on.
Relief requested Examples: investigation, order to stop unfair collection, verification of authority to operate, sanction for violations, correction of charges, or referral to the proper agency.

Step 2: File through the SEC iMessage Portal

The SEC iMessage Portal allows users to open a new ticket, submit a complaint, and check ticket status. The portal itself states that it accepts feedback, issues, and complaints and provides options to open a new ticket and check ticket status. (imessage.sec.gov.ph)

When filing, choose the category closest to lending company, financing company, online lending platform, or complaint. Attach your complaint and evidence in organized files.

Step 3: Use the proper subject line if emailing a complaint form

SEC FOI responses on lending and financing complaints have instructed complainants sending complaint forms by email to use a subject format like:

COMPLETE NAME_RESPONDENT COMPANY_SUBJECT OF COMPLAINT

Example:

JUAN DELA CRUZ_ABC LENDING_DISCLOSURE STATEMENT VIOLATION

The same SEC FOI response warned complainants to read and follow the complaint instructions carefully to avoid outright dismissal. (www.foi.gov.ph)

Step 4: Keep the ticket number and follow up properly

After submission, save:

Ticket number
Date and time filed
Email acknowledgement
Uploaded file list
Name of SEC department or staff, if provided

If you need to follow up, refer to the ticket number and add only new evidence. Sending multiple scattered emails with different stories can slow down review.

Step 5: File parallel complaints when needed

If the lender accessed your contacts, messaged your relatives, posted your photo, or used your personal data beyond what was necessary, file with the NPC as well. The NPC’s formal complaint process requires using its complaint form, printing and filling it out, having it notarized, and submitting it in person, by courier, or by scanned email. (National Privacy Commission)

If there are threats of violence, fake warrants, identity theft, sexualized insults, doctored photos, fake barangay or police notices, or scam links, preserve the evidence and report to NBI Cybercrime or PNP Anti-Cybercrime. The 2026 joint advisory lists those agencies for harassment, threats, frauds, and scams connected with abusive online lending practices.

Evidence Checklist for SEC Complaints

Evidence	Why it matters
Screenshot of app name and logo	Identifies the OLP being complained of
App store or website page	Shows developer, download source, claims, and public representations
Loan agreement or terms and conditions	Shows interest, fees, penalties, repayment terms
Disclosure statement	Shows whether the lender complied with Truth in Lending rules
Proof of amount received	Helps compare advertised loan with actual disbursed amount
Proof of payments	Prevents inflated balance claims
Screenshots of demands	Shows amount being collected and collection tone
Threats, insults, shaming messages	Supports unfair debt collection complaint
Messages sent to contacts	Supports SEC and NPC issues
Call logs	Shows repeated or unreasonable contact
IDs of collectors or numbers used	Helps trace responsible agents or service providers
Your own timeline	Makes the complaint easier to evaluate

What SEC Can Do — and What It Usually Cannot Do

The SEC can investigate regulated lending and financing companies, require compliance, issue orders, impose fines, suspend or revoke authority, and act against unauthorized lending activity within its jurisdiction. RA 9474 expressly authorizes the SEC to impose administrative sanctions, including suspension or revocation of a lending company’s authority to operate and fines for violations. (Supreme Court E-Library)

The SEC’s role is mainly regulatory. It is not the same as a court collecting damages for emotional distress, refunding every overpayment, or deciding all civil disputes between borrower and lender. If the issue involves civil damages, nullity of unconscionable interest, or recovery of overpayments, that may require court action.

Philippine courts can reduce or nullify interest rates that are excessive, iniquitous, unconscionable, or contrary to morals. In Medel v. Court of Appeals, the Supreme Court found 5.5% monthly interest, or 66% per year, unconscionable and void. (Supreme Court E-Library) More recently, the Supreme Court reiterated that although parties may agree on interest, deviations from the legal rate must be reasonable and fair, and lenders may not impose rates that “enslave borrowers or hemorrhage their assets.” (Supreme Court of the Philippines)

Practical Timelines and Bottlenecks

Stage	What usually happens	Common bottleneck
Filing	You submit through SEC iMessage or the required SEC complaint channel	Missing attachments or unclear respondent name
Initial review	SEC checks whether the complaint is within its jurisdiction	App name does not match corporate name
Clarification	SEC may ask for more documents or clearer evidence	Screenshots lack dates, phone numbers, or full message threads
Referral or endorsement	Privacy or cybercrime issues may be referred or filed separately	Complainant expects one agency to handle everything
Enforcement review	SEC evaluates possible violations and sanctions	Many complaints involve unregistered or shifting app operators
Resolution or action	SEC may act administratively, issue directives, or include the entity in enforcement action	Timelines vary depending on evidence and respondent traceability

A well-organized complaint can move faster than a long emotional narrative with incomplete proof. The best complaint shows who did what, when, through which app or number, and which document or screenshot proves it.

Special Notes for OFWs, Foreigners, and People Outside the Philippines

You may still report an online lending app even if you are outside the Philippines, especially if the lender is a Philippine lending or financing company, the borrower is in the Philippines, the loan was offered through a Philippine-facing app, or the abusive collection targeted people in the Philippines.

For overseas complainants:

Use your passport, Philippine ID, foreign ID, or residence card if requested.
Indicate your current country and Philippine contact details, if any.
Attach screenshots in Philippine time if possible, or explain the time zone.
If an affidavit is required and you are abroad, Philippine embassies and consulates commonly provide notarization or acknowledgment services for affidavits and other documents to be used in the Philippines; personal appearance is usually required. (Philippine Consulate LA)
If using a foreign public document in the Philippines, check whether apostille or consular authentication is needed based on the country where the document was issued and where it will be used. (Apostille Philippines)

Common Mistakes That Weaken SEC Complaints

Filing only a one-sentence complaint

“Please help, this app is harassing me” is understandable, but it is not enough. Add dates, screenshots, numbers, loan details, and the specific acts complained of.

Not naming the company behind the app

The SEC regulates companies. If you only provide the app nickname, SEC may need more time to identify the operator. Look for the corporate name in the app, loan agreement, privacy policy, disclosure statement, SMS footer, or app store developer page.

Deleting the app too early

Uninstalling may remove transaction history, loan agreements, permissions, and in-app messages. Save evidence first.

Paying through personal accounts without documentation

Some abusive lenders ask borrowers to pay to personal GCash or Maya numbers. If you pay anything, save the recipient name, number, reference code, amount, and date. A payment record may later help prove overpayment or unauthorized collection.

Mixing all agencies into one complaint

SEC, NPC, NBI, PNP, and BSP have different mandates. The same evidence may be used, but the complaint should explain why each agency is involved.

Assuming nonpayment allows harassment

A borrower may still owe money, but the lender must collect lawfully. Debt does not give collectors permission to threaten, shame, misrepresent legal consequences, or misuse personal data.

Frequently Asked Questions

Can I report an online lending app to the SEC even if I still owe money?

Yes. A valid debt does not legalize harassment, hidden charges, excessive fees, unrecorded operations, or unfair collection practices. Be honest about the amount borrowed, amount received, payments made, and what you are disputing.

Which SEC office handles online lending app complaints?

The 2026 DICT-NPC-SEC advisory identifies the SEC Financing and Lending Companies Department (FINLEND) for unfair debt collection practices involving online lending platforms, with complaints submitted through SEC iMessage and assistance through the SEC hotline 1-4SEC.

What if the lending app is not registered with the SEC?

Report it to the SEC and clearly state that you cannot find its SEC registration, Certificate of Authority, or recorded OLP status. Attach screenshots of the app, website, loan offer, and collection messages. Operating as a lending company without SEC authority is penalized under RA 9474. (Supreme Court E-Library)

Can the lender contact my relatives, employer, or phone contacts?

The 2026 DICT-NPC-SEC advisory states that contacting persons in the borrower’s contact list other than named guarantors is prohibited for debt collection purposes. It also says guarantors must have expressly consented to assume responsibility for the loan in case of default.

Can an online lending app access my contact list?

Unnecessary, excessive, or disproportionate processing of personal data, including excessive access to contact lists, is prohibited. The 2026 advisory says OLPs may only access contact lists for limited legitimate purposes, such as allowing the borrower to select character references or guarantors, and unbridled processing of contact lists is prohibited.

Can I be jailed for not paying an online loan?

Not for ordinary civil debt alone. The Constitution states that no person shall be imprisoned for debt. However, separate crimes such as fraud, identity falsification, threats, or other criminal acts are different issues. (Supreme Court E-Library)

What if the app charges huge interest but I clicked “agree”?

Clicking “agree” does not automatically make every charge valid. Truth in Lending rules require proper disclosure, SEC and BSP rules cap certain small short-term loans, and courts may strike down unconscionable interest rates. (Supreme Court E-Library) (Supreme Court of the Philippines)

Should I file with the SEC or NPC first?

File with the SEC if the main issue is lending conduct: unregistered lending, unfair collection, hidden charges, excessive fees, or OLP violations. File with the NPC if the main issue is personal data misuse, contact-list harvesting, or privacy violation. If both happened, file both and attach the same evidence where relevant.

Do I need a notarized affidavit for the SEC?

For an initial SEC iMessage report, attach clear evidence first and follow the portal’s instructions. If SEC requires a formal complaint form, affidavit, or additional sworn statement, comply with the required format. For NPC formal complaints, the NPC specifically instructs complainants to print, fill out, and notarize the complaint form before submission. (National Privacy Commission)

Key Takeaways

Report online lending app SEC violations through the SEC iMessage Portal and identify the real company behind the app.
Strong evidence matters: loan terms, disclosure statement, screenshots, call logs, payment records, and messages sent to you or your contacts.
SEC issues include unauthorized lending, unrecorded OLPs, hidden charges, excessive fees, and unfair debt collection.
NPC issues include contact-list misuse, excessive app permissions, unauthorized data processing, and privacy violations.
NBI or PNP Anti-Cybercrime issues include threats, fake warrants, identity misuse, online harassment, and scams.
A valid loan may still be collected, but collection must be lawful, truthful, and respectful of privacy and dignity.