If an online lending app tricked you into paying fees, stole your personal data, accessed your contacts, threatened to shame you, or used fake collection tactics, you can report it to the DICT through the government cyber-scam reporting channels handled with the Cybercrime Investigation and Coordinating Center (CICC). The fastest route is usually the 1326 hotline, the eGovPH app’s eReport feature, and the DICT cyber hotline email, while related complaints may also need to go to the SEC, National Privacy Commission, NBI, PNP Anti-Cybercrime Group, or your bank or e-wallet provider depending on what happened. (Philippine News Agency)

Online lending app scams are stressful because they often combine money problems, data privacy abuse, and threats. Some victims are told they owe money they never received. Others borrowed a small amount but later face public shaming, contact-list harassment, fake legal threats, or demands sent to relatives, employers, and co-workers. This guide explains what DICT can do, what evidence to preserve, how to file the report step by step, and which other Philippine agencies should receive a parallel complaint.

What Counts as an Online Lending App Scam in the Philippines?

An online lending app scam is not limited to a fake loan app that disappears after collecting “processing fees.” In practice, complaints often fall into several patterns:

Situation	What usually happened	Where to report
Fake loan approval scam	The app or agent asks for advance fees, “unlocking fees,” verification deposits, tax, insurance, or wallet top-ups before releasing the loan	DICT/CICC, PNP-ACG, NBI, bank/e-wallet
Data harvesting	The app accesses contacts, photos, SMS, or social media data beyond what is needed for the loan	DICT/CICC, NPC, SEC
Harassment and public shaming	Collectors message your contacts, post edited photos, create group chats, or threaten to label you a scammer	DICT/CICC, SEC, NPC, PNP-ACG/NBI
Identity theft	Someone used your name, ID, phone number, or face verification to borrow money	DICT/CICC, PNP-ACG/NBI, NPC, SEC
Fake legal threats	Collectors claim there is already a warrant, hold-departure order, barangay case, or cybercrime case to force payment	DICT/CICC, SEC, PNP-ACG/NBI
Unauthorized bank or e-wallet transfer	You clicked a loan link and your financial account was accessed or money was transferred	Bank/e-wallet first, then DICT/CICC, BSP, PNP-ACG/NBI

The March 2026 joint advisory of DICT, the National Privacy Commission, and the Securities and Exchange Commission specifically warns against online lending platforms engaging in harassment, intimidation, public shaming, and unlawful use of personal data in collection practices. It also states that unnecessary app permissions, excessive access to contact lists, and contacting people in the borrower’s contact list other than guarantors are prohibited.

What DICT and CICC Can Do

The DICT is the government department responsible for information and communications technology policy and programs. For online scams, the relevant DICT-linked office is the CICC, which coordinates cybercrime response and works with other agencies.

For scam reporting, the government promotes the Inter-Agency Response Center hotline 1326. The Philippine Information Agency described 1326 as a 24/7 central number for reporting online selling scams, deceitful messages, emails, romance scams, impersonation, investment fraud, cybercrimes, and phishing. It also noted that enforcement is handled by agencies such as the PNP Anti-Cybercrime Group and the NBI Cybercrime Division. (Philippine Information Agency)

DICT/CICC reporting is useful because it can:

record the scam and provide a reporting trail;
help triage whether the matter should go to the PNP, NBI, SEC, NPC, NTC, or another agency;
support blocking or takedown action for scam numbers or channels when applicable;
help authorities detect repeated scam patterns involving the same app, number, wallet, or platform;
guide victims on the proper next office for formal investigation.

It is important to understand the limitation: a DICT report is not the same as a court case, and it does not automatically erase a debt, recover money, or stop all messages overnight. For money recovery, you usually need to report immediately to your bank, e-wallet, or payment provider. For criminal prosecution, you may need a formal sworn complaint with the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or prosecutor.

Legal Basis: Your Rights Against Online Lending App Scams

Cybercrime Prevention Act: RA 10175

Republic Act No. 10175, the Cybercrime Prevention Act of 2012, defines and penalizes cybercrime offenses and provides the framework for cybercrime prevention, investigation, suppression, and penalties in the Philippines. Online lending app scams may involve computer-related fraud, identity theft, cyberlibel, illegal access, or other offenses committed through information and communications technology. (Lawphil)

The Supreme Court discussed RA 10175 in Disini v. Secretary of Justice, where it reviewed the constitutionality of several provisions of the Cybercrime Prevention Act. The case is often cited because it confirms that cybercrime enforcement must still respect constitutional rights such as privacy, due process, and free speech. (Supreme Court E-Library)

Revised Penal Code: Estafa, Threats, Coercion, and Libel

Many online lending app scams still fall under traditional crimes in the Revised Penal Code. The most common is estafa under Article 315, which generally involves deceit or abuse of confidence causing damage to another person. For example, if an app deceives you into paying “release fees” for a loan that never existed, estafa may be considered.

Depending on the exact messages and conduct, other possible offenses may include:

grave threats under Article 282, if there are serious threats to harm you, your family, reputation, or property;
grave coercions under Article 286, if force, violence, or intimidation is used to compel you to do something against your will;
unjust vexation, if the conduct is oppressive and harassing but does not fit a more specific offense;
libel under Articles 353 and 355, or cyberlibel under RA 10175, if defamatory accusations are published online or sent through digital means.

Data Privacy Act: RA 10173

Republic Act No. 10173, the Data Privacy Act of 2012, protects personal information in government and private information systems. It recognizes privacy as a fundamental right and requires lawful, fair, and proportionate processing of personal data. (Lawphil)

This matters because many abusive lending apps collect more data than necessary. The NPC has previously warned that online lenders are prohibited from harvesting phone and social media contact lists for harassment, and the DICT-NPC-SEC advisory reiterates that excessive contact-list processing, harassment, and contacting non-guarantors are prohibited. (National Privacy Commission)

Lending Company Regulation Act: RA 9474 and SEC Rules

Republic Act No. 9474, the Lending Company Regulation Act of 2007, regulates lending companies in the Philippines and places them under SEC supervision. Lending companies are not supposed to operate casually as anonymous mobile apps; they must comply with legal and regulatory requirements. (Lawphil)

The SEC also issued Memorandum Circular No. 18, Series of 2019, on the prohibition of unfair debt collection practices of financing companies and lending companies. This is the key SEC rule usually cited in complaints involving threats, harassment, public shaming, misrepresentation, and abusive collection tactics. (SEC Appointment System)

Financial Consumer Protection and Financial Account Scams

Republic Act No. 11765, the Financial Products and Services Consumer Protection Act, strengthens protection for consumers of financial products and services. It gives financial regulators such as the BSP and SEC stronger authority over covered institutions and consumer protection issues. (Lawphil)

Republic Act No. 12010, the Anti-Financial Account Scamming Act, is especially relevant when a lending scam involves e-wallets, bank accounts, phishing, mule accounts, or social engineering. It covers financial accounts including bank accounts and e-wallets, penalizes money muling and social engineering schemes, and allows temporary holding and coordinated verification of disputed transactions under BSP rules. (Lawphil)

Before You Report: Preserve Evidence Properly

Your report is only as strong as your evidence. Do not rely on memory. Do not delete the app, messages, call logs, or emails until you have secured copies.

Save these immediately:

Screenshots of the app
- App name
- Developer name
- Google Play or App Store listing
- Website or download link
- Loan dashboard
- Claimed amount borrowed
- Fees, interest, due date, and penalties
Screenshots of conversations
- SMS
- Messenger, Viber, Telegram, WhatsApp, email, or in-app chat
- Threats, insults, fake legal notices, or public shaming threats
- Messages sent to your contacts
Payment records
- GCash, Maya, bank transfer, remittance, QR payment, or payment center receipt
- Reference numbers
- Sender and receiver names
- Mobile number, account number, or wallet ID
- Date, time, and amount
Caller and sender details
- Phone numbers
- Sender names
- Email addresses
- Social media profiles
- Links and URLs
Proof of identity theft or data misuse
- Contacts who received messages
- Group chats created by collectors
- Edited photos or posts
- Loan applications you did not make
- Notices for loans you never received
Device information
- Phone model
- SIM number used
- App permissions granted
- Whether you allowed contacts, camera, location, SMS, or storage access

Under the Philippine Rules on Electronic Evidence, the person presenting an electronic document has the burden of proving its authenticity. That is why it is better to keep the original messages on the device, export copies when possible, and make a clear timeline of events. (Lawphil)

How to Report an Online Lending App Scam to DICT

1. If money was transferred, report to your bank or e-wallet first

If you paid through a bank or e-wallet, time matters. Report the transaction immediately to the customer service or fraud channel of the bank, e-money issuer, or payment platform. Ask for:

a fraud ticket or complaint reference number;
temporary hold or freezing of the recipient account if still possible;
written confirmation of your report;
reversal or dispute process;
the full transaction details available to you.

This step is separate from DICT reporting. DICT/CICC may help coordinate cyber-scam response, but the bank or e-wallet is usually the first party that can act on the movement of funds. If the bank or e-wallet does not resolve the matter, the BSP Consumer Assistance Mechanism allows escalation through BSP Online Buddy or by email using the required complaint details and supporting documents. (Bureau of Small and Medium Enterprises)

2. Call the 1326 hotline for urgent cyber-scam reporting

For urgent online scam reporting, call 1326, the Inter-Agency Response Center hotline. Be ready to explain the incident clearly:

“I am reporting an online lending app scam.”
“The app name is ____.”
“I paid through ____ on this date and time.”
“The collector is threatening to message my contacts.”
“The numbers used are ____.”
“I have screenshots and transaction records.”

Ask for a reference number or instructions on how to submit supporting evidence. If you are emotionally shaken, write a short script before calling so you can give complete details.

3. Submit details through the eGovPH app eReport feature

The eGovPH app has an eReport feature for reporting scams and suspicious messages. The CICC has encouraged the public to use eGovPH eReport aside from calling 1326, and the Philippine News Agency reported that scam data submitted through the app may be sent to the NTC for blocking of numbers. (Philippine News Agency)

A practical filing flow is:

Open the eGovPH app.
Go to the reporting or eReport section.
Choose the scam-related category.
Upload screenshots of the lending app, messages, payment proof, and sender numbers.
Describe the incident in chronological order.
Submit and save the ticket or confirmation.

Use a short but complete description. Example:

“I am reporting an online lending app scam involving [app name]. On [date], I applied for a loan and was asked to pay [amount] to [wallet/account]. No loan was released. The persons using [numbers/accounts] are now threatening to message my contacts and post my photo. Attached are screenshots of the app, payment proof, messages, and numbers used.”

4. Email the DICT cyber hotline if you need to attach a full evidence packet

The 2026 DICT-NPC-SEC advisory lists the DICT Cyber Hotline email as 1326@dict.gov.ph for other forms of harassment, threats, frauds, and scams.

For email reports, use a clear subject line:

Subject: Online Lending App Scam Report — [App Name] — [Your Name or Initials]

Attach files in organized form:

01_Timeline.pdf
02_App_Screenshots.pdf
03_Threat_Messages.pdf
04_Payment_Receipts.pdf
05_Numbers_and_Accounts.pdf
06_ID_Proof_if_required.pdf

Keep the body short and structured:

Detail	What to include
Your name and contact details	Mobile number, email, city/province, whether you are in the Philippines or abroad
App details	App name, developer, link, website, package name if available
Incident type	Advance fee scam, unauthorized loan, harassment, contact-list abuse, phishing, identity theft
Money involved	Amount paid, date/time, receiver account or wallet, reference number
Numbers/accounts used	Phone numbers, emails, social media links, bank/e-wallet recipient details
Immediate risk	Threats, public shaming, access to contacts, account compromise
Action requested	Recording of report, referral to proper agency, blocking/takedown coordination, guidance for formal complaint

5. Keep all reference numbers and follow up in writing

After filing through 1326, eGovPH, or email, save:

hotline reference number;
eReport ticket number;
email sent copy;
automated acknowledgments;
names or offices of personnel who contacted you;
instructions given by DICT/CICC.

If the scam continues, file a supplemental report instead of starting over. Use your previous reference number and add new evidence.

When to Report to Other Agencies Too

Online lending app scams often require parallel reporting. DICT is a strong starting point for cyber-scam triage, but it is not the only agency involved.

Problem	Agency	Why it matters
Abusive collection by lending or financing company	SEC Financing and Lending Companies Department through SEC iMessage	SEC regulates lending and financing companies and receives complaints through its ticketing system (Securities and Exchange Commission)
Contact-list harvesting, privacy abuse, unlawful use of photos or personal data	National Privacy Commission	NPC formal complaints require a specific form, notarization, and submission in person, by courier, or by scanned email as allowed (National Privacy Commission)
Criminal scam, threats, identity theft, cyber harassment	PNP Anti-Cybercrime Group or NBI Cybercrime Division	These agencies handle investigation and formal criminal complaint processing; the NBI Cybercrime Division citizen’s charter describes filing, interview, sworn statements, and evidence submission (National Bureau of Investigation)
Bank or e-wallet fraud	Bank/e-wallet first, then BSP if unresolved	BSP allows escalation through its consumer assistance channels after the financial institution’s complaint mechanism is used (Bureau of Small and Medium Enterprises)
Scam SMS numbers	DICT/CICC through eGovPH and 1326, with possible NTC blocking	CICC has encouraged reporting scam SMS and suspicious messages through eGovPH and 1326 (Philippine News Agency)

How to File a Related SEC Complaint Against the Lending App

Use the SEC route when the app appears to be a lending or financing company, or when the main issue is unfair debt collection.

Prepare:

borrower’s name and contact details;
name of lending company, financing company, app, or collector;
SEC registration number or Certificate of Authority if known;
screenshots of threats and collection messages;
loan disclosure, repayment schedule, or in-app loan page;
proof that collectors contacted third parties;
proof of payments;
explanation of the relief requested.

The DICT-NPC-SEC advisory directs complaints on unfair debt collection practices to the SEC Financing and Lending Companies Department through SEC iMessage and the SEC hotline 1-4732.

A good SEC complaint does not just say “harassment.” It should identify the exact acts:

“They contacted my employer even though my employer is not a guarantor.”
“They sent my photo to a group chat and called me a scammer.”
“They threatened arrest for a civil debt.”
“They used obscene language.”
“They demanded payment from relatives who did not consent to be guarantors.”
“They accessed my contact list without a legitimate purpose.”

How to File a Related NPC Complaint for Data Privacy Abuse

Use the NPC route when the lending app accessed or used personal data improperly. Examples include:

harvesting your contact list;
messaging people who are not guarantors;
posting your photo or ID;
using your personal information for public shaming;
storing or processing your data after the legitimate purpose ended;
making withdrawal of consent difficult or deceptive.

NPC formal complaints require a specific process: download the complaint form, print and fill it out, have it notarized, and submit it in person, by courier, or by scanned email as authorized by the Commission. (National Privacy Commission)

For overseas Filipinos and foreigners abroad, ask the receiving agency whether it will accept a notarized affidavit signed abroad, a consular notarization, or an apostilled document. Requirements can differ depending on whether the filing is administrative, criminal, or for court use.

Practical Timelines and Bottlenecks

Step	Usual timing	Common bottleneck
Calling 1326	Same day	High call volume; incomplete facts
eGovPH eReport	Same day if app access works	Upload limits, unclear screenshots
DICT email submission	Same day to a few days for acknowledgment	Large attachments, missing timeline
Bank/e-wallet fraud report	Immediately; hours matter	Funds already withdrawn or transferred
SEC complaint	Weeks to months depending on docket and evidence	App uses different trade name from registered company
NPC formal complaint	Weeks to months	Notarization, incomplete proof of personal data misuse
NBI/PNP criminal complaint	Initial filing may be same day; investigation can take weeks or months	Need sworn statements, device review, account tracing, coordination with platforms
Prosecutor’s office	Often months	Backlog, need for complete affidavits and evidence

A common mistake is filing only one report and waiting. If there is money loss, privacy abuse, and threats, file with the proper agencies in parallel and keep the reference numbers organized.

Common Mistakes That Hurt Online Lending App Scam Reports

Deleting the app too early

Uninstalling the app may remove useful screens, loan details, permissions, notifications, and transaction logs. First, screenshot the app pages, record the app version if visible, and save the download link.

Paying more because of threats

Scammers often escalate fear: “Pay now or we will file a cybercrime case,” “You will be arrested today,” or “We will send police to your house.” A private collector cannot issue a warrant. Warrants come from courts. Debts generally do not become criminal cases simply because payment is delayed, although fraud or deceit can create separate criminal exposure depending on facts.

Ignoring your bank or e-wallet

If you sent money, report to the financial provider immediately. DICT reporting helps cyber-scam response, but your bank or e-wallet is the channel that can act fastest on disputed transfers.

Reporting without a timeline

Authorities handle many complaints. A clear timeline makes your report easier to act on:

Date and time you downloaded the app
Date and time you applied
Amount supposedly approved
Fees demanded
Payment sent
Whether loan was released
When threats began
Who was contacted
What you want investigated

Naming the wrong respondent

Online lending apps often use one public app name, another developer name, another corporate name, and several collection numbers. Include all names and identifiers instead of guessing which one is “official.”

Relying only on screenshots from contacts

If collectors messaged your relatives or employer, ask those persons to preserve the original messages on their own phones. Their screenshots are useful, but original messages and sworn statements may be needed later.

Special Notes for OFWs and Foreigners

Filipinos abroad can still report through online channels such as eGovPH, email, and the hotline if accessible. If a formal sworn complaint is needed, expect that you may later be asked for a notarized affidavit, consular notarization, or documents authenticated for Philippine use.

Foreigners in the Philippines can report online lending app scams too. Bring your passport, ACR I-Card if applicable, local address, Philippine contact number, payment records, and copies of messages. If the scam involves a Philippine app, Philippine phone number, Philippine bank or e-wallet, or conduct affecting you while in the Philippines, local agencies may still be relevant.

If you are a foreigner outside the Philippines dealing with a Philippine lending app, focus your first report on objective evidence: app link, Philippine numbers used, payment channel, names of Filipino contacts harassed, and any Philippine bank or e-wallet accounts involved.

Frequently Asked Questions

Can I report an online lending app scam directly to DICT?

Yes. For scam-related reports, you can use the 1326 hotline, eGovPH eReport, and the DICT cyber hotline email listed in the DICT-NPC-SEC advisory. If the case involves unfair debt collection, data privacy abuse, or criminal threats, also file with the SEC, NPC, PNP-ACG, or NBI as appropriate. (Philippine News Agency)

Is 1326 for online lending app harassment?

1326 is used for cyber-scam and online harm reporting. If the lending app harassment includes threats, fraud, impersonation, phishing, public shaming, or suspicious messages, it is appropriate to report it through 1326. For unfair debt collection practices, also report to the SEC.

Can DICT make the lending app stop messaging my contacts?

DICT/CICC can receive and coordinate cyber-scam reports, and reports may support blocking, referral, or enforcement action. However, if the issue is contact-list misuse or abusive collection, an SEC and NPC complaint is usually needed too. For threats or identity theft, report to PNP-ACG or NBI.

Can I get my money back after reporting to DICT?

A DICT report does not guarantee a refund. If you paid through a bank, e-wallet, or payment provider, report immediately to that provider and ask for a fraud ticket, temporary hold, reversal, or dispute review. If unresolved, escalate through BSP consumer assistance channels. (Bureau of Small and Medium Enterprises)

What if the lending app is registered with the SEC?

Registration does not give a lending company permission to harass, threaten, publicly shame, or misuse personal data. SEC Memorandum Circular No. 18, Series of 2019, prohibits unfair debt collection practices, and the 2026 DICT-NPC-SEC advisory reiterates that excessive data processing and contacting non-guarantor contacts are prohibited. (SEC Appointment System)

What if I really borrowed money but the collector is abusive?

A legitimate debt does not justify illegal collection methods. You may still dispute harassment, threats, public shaming, or contact-list abuse. Keep records of what you received, what you paid, the remaining balance claimed, and the abusive messages.

Should I go to the barangay first?

For cyber scams, identity theft, online harassment, and financial fraud, go directly to DICT/CICC, PNP-ACG, NBI, SEC, NPC, or your financial provider. A barangay blotter can help document local harassment, but the barangay cannot trace cyber offenders, freeze accounts, or investigate app operators.

What if collectors threaten me with arrest?

Do not panic. A private collector cannot order your arrest. Save the threat and report it. Arrest warrants are issued by courts, not by lending apps, collectors, or barangay officials. Fake warrant threats may support complaints for unfair collection, harassment, coercion, or fraud depending on the facts.

What if the app messaged my employer or relatives?

Save screenshots from your employer or relatives and ask them not to delete the original messages. The 2026 advisory states that contacting persons in the borrower’s contact list other than guarantors is prohibited for debt collection purposes.

Do I need a lawyer to report an online lending app scam?

You can file initial reports yourself. For serious cases involving large losses, identity theft, public shaming, employer harassment, or a planned criminal complaint, legal help can make the affidavit, evidence packet, and agency filings clearer.

Key Takeaways

Report online lending app scams to DICT/CICC through 1326, eGovPH eReport, or 1326@dict.gov.ph.
Preserve evidence before deleting the app: screenshots, messages, payment receipts, app links, sender numbers, and contact-list harassment proof.
If money moved through a bank or e-wallet, report to the financial provider immediately and escalate to BSP if unresolved.
File parallel complaints when needed: SEC for unfair debt collection, NPC for data privacy abuse, and PNP-ACG or NBI for criminal investigation.
A real debt does not allow threats, public shaming, fake arrest warnings, or messaging non-guarantor contacts.
Keep reference numbers and file supplemental reports when new threats, numbers, accounts, or evidence appear.