Fake loan apps and illegal gambling apps often use the same playbook: fast cash, hidden charges, access to your phone contacts, repeated calls, public shaming, threats, fake legal notices, and messages to your family, employer, or friends. In the Philippines, this is not “normal collection.” Depending on what happened, it may involve violations of lending regulations, data privacy law, cybercrime law, illegal gambling rules, and even criminal offenses such as threats, coercion, libel, or unjust vexation. This guide explains where to report these apps, what evidence to prepare, which Philippine laws apply, and how to protect yourself while your complaint is being processed.

What Counts as a Fake Loan App or Abusive Online Lending App?

A loan app becomes suspicious when it offers money quickly but hides who actually operates it, charges unclear or excessive fees, or uses intimidation to force payment.

Common red flags include:

The app is not listed as a recorded online lending platform with the Securities and Exchange Commission (SEC).
The company name in the app does not match the name on the SEC registration.
The app asks for access to your entire contact list, photos, files, location, camera, or social media accounts.
The amount released is much lower than the amount “approved” because of hidden processing fees.
The repayment period is extremely short, often 7 days or less.
Collectors threaten to post your photo, message your contacts, or accuse you of fraud.
They send fake court notices, fake barangay complaints, fake police subpoenas, or fake arrest threats.
They use multiple mobile numbers, Telegram accounts, Viber accounts, or Facebook pages instead of official company channels.

Under the Lending Company Regulation Act of 2007, Republic Act No. 9474, a lending company must generally be organized as a corporation and must have authority from the SEC to engage in lending. For online lending, the SEC also requires reporting and disclosure under SEC rules, including SEC Memorandum Circular No. 19, Series of 2019.

What Counts as an Illegal Gambling App?

Not every online gaming platform is automatically illegal, but many gambling apps circulating through social media, text messages, Telegram groups, or fake ads are not licensed or supervised in the Philippines.

A gambling app may be illegal or unsafe if:

It cannot show a valid PAGCOR license or authority.
It uses GCash, Maya, bank transfers, crypto wallets, or personal accounts for deposits.
It promises guaranteed winnings, “sure odds,” or cash bonuses that require more deposits.
It lends you money or gives “credit” to continue betting, then threatens you when you cannot pay.
It uses agents, fake Facebook accounts, or group chats instead of a verified website.
It refuses withdrawals and demands more payment for “tax,” “verification,” or “unlocking.”
It asks for your ID, selfie, contacts, or bank details without a legitimate privacy notice.

PAGCOR has warned the public against illegal online gambling because of risks such as scams, identity theft, and credit card fraud. You can check official PAGCOR information through the PAGCOR website and verify gaming concerns through PAGCOR’s regulatory contact channels.

Illegal gambling is generally punished under Philippine gambling laws, including Presidential Decree No. 1602, which strengthened penalties for illegal gambling, and related laws depending on the specific activity.

Why Harassment by Loan or Gambling Apps May Be Illegal

Debt collection is allowed when done lawfully. A lender may remind you of payment, send demand letters, or pursue proper legal remedies. What the law does not allow is abuse.

The following acts may create legal liability:

Harassing act	Possible legal issue
Accessing your phone contacts and messaging them	Data privacy violation
Posting your photo with “scammer,” “magnanakaw,” or similar words	Libel, cyberlibel, data privacy violation
Threatening arrest without a real case	Grave threats, coercion, unjust vexation
Calling your employer repeatedly	Unfair debt collection, privacy violation
Sending fake subpoenas or fake court notices	Fraud, falsification-related issues depending on facts
Using your ID or photo in fake posts	Identity misuse, cybercrime, privacy violation
Charging hidden fees and misleading rates	SEC consumer protection issue
Operating without SEC authority	Unauthorized lending activity
Operating an unlicensed betting platform	Illegal gambling and cybercrime-related concerns

The SEC specifically issued SEC Memorandum Circular No. 18, Series of 2019 prohibiting unfair debt collection practices by financing and lending companies. This is the main SEC rule borrowers cite when reporting harassment by online lending apps.

Your Key Rights Under Philippine Law

Right to fair treatment as a financial consumer

Republic Act No. 11765, the Financial Products and Services Consumer Protection Act, protects financial consumers and recognizes rights such as:

equitable and fair treatment;
disclosure and transparency;
protection of consumer assets against fraud and misuse;
data privacy and protection; and
timely handling and redress of complaints.

This law matters because online lending is a financial service. If the app hides charges, misleads borrowers, or uses abusive collection methods, the SEC may treat it as a financial consumer protection issue.

Right to data privacy

Republic Act No. 10173, the Data Privacy Act of 2012, protects personal information such as your name, number, address, ID, photo, employer, contacts, and sensitive personal information.

For loan-related transactions, the National Privacy Commission (NPC) has issued specific guidance. The NPC has stated that online lenders are prohibited from harvesting phone and social media contact lists for harassment, and NPC Circular No. 2020-01, as amended by NPC Circular No. 2022-02, covers personal data processing for loan applications, loan collection, character references, guarantors, and account closure.

In practical terms, a loan app should not freely scrape your entire contact list just because you installed it. Consent must be specific, informed, and limited to a legitimate purpose. A vague “allow all permissions” screen does not automatically justify shaming or contacting everyone in your phone.

Right against threats, coercion, and public shaming

The Revised Penal Code may apply when collectors go beyond civil collection and start threatening, humiliating, or intimidating you.

Possible offenses include:

Grave threats under Article 282, if they threaten to cause a wrong amounting to a crime.
Grave coercion under Article 286, if they unlawfully compel you to do something against your will.
Unjust vexation under Article 287, for acts that annoy, irritate, torment, distress, or disturb without lawful justification.
Libel or oral defamation, depending on whether the defamatory statement was written, posted, or spoken.
Cyberlibel, when libelous statements are made through a computer system or online platform under Republic Act No. 10175, the Cybercrime Prevention Act of 2012.

The Supreme Court in Disini v. Secretary of Justice, G.R. No. 203335, recognized the validity of cyberlibel under the Cybercrime Prevention Act, while also striking down some unconstitutional provisions of the law. This is why online shaming posts, edited photos, and defamatory messages can become criminal issues when the facts are strong.

Right to civil remedies for abuse

Even if a case is not immediately filed as a criminal case, the Civil Code may help. Article 19 requires every person to act with justice, give everyone his due, and observe honesty and good faith. Article 20 makes a person liable for damages if they willfully or negligently cause damage contrary to law. Article 21 covers acts contrary to morals, good customs, or public policy. Article 26 protects personal dignity, privacy, and peace of mind against meddling and similar abuses.

These provisions are often useful when harassment causes reputational harm, emotional distress, job problems, or damage to family relationships.

Where to Report Fake Loan Apps and Harassing Collectors

You do not need to choose only one office. In many cases, victims file parallel reports because each agency has a different role.

Problem	Best office to report to	What that office can usually handle
Unauthorized or abusive loan app	SEC	Lending authority, unfair collection, unrecorded online lending platform
Contact harvesting, doxxing, shaming, privacy abuse	NPC	Data privacy complaint and investigation
Threats, cyberlibel, identity misuse, online harassment	PNP Anti-Cybercrime Group or NBI Cybercrime Division	Criminal investigation
Scam links, fake apps, coordinated online fraud	CICC / 1326 / eGovPH eReport	Scam reporting and referral
Illegal gambling app	PAGCOR, PNP, NBI, CICC	Gaming license verification, illegal gambling, scam referral
Bank or e-wallet account used by scammers	Bank/e-wallet provider, possibly BSP channel	Account freeze request, fraud report, transaction tracing
Immediate physical danger	911, nearest police station	Emergency response and blotter

1. Report to the SEC for fake or abusive lending apps

Report the app to the SEC when the issue involves:

unregistered lending activity;
an online lending platform not recorded with the SEC;
harassment by collectors;
hidden charges or misleading loan terms;
use of a company name that appears fake or different from the app name;
threats disguised as “legal collection.”

You can use the SEC’s complaint platform, iMessage SEC, to open a ticket and track the status. The SEC headquarters is at 7907 Makati Avenue, Salcedo Village, Bel-Air, Makati City, but online filing is usually more practical for borrowers outside Metro Manila or OFWs abroad.

Include the following in your SEC report:

App name as shown in Google Play, Apple App Store, APK file, Facebook ad, or website.
Developer name and app link.
Company name, if shown in the loan agreement or privacy policy.
Screenshots of the loan offer, charges, due date, interest, and repayment instructions.
Screenshots of harassment messages.
Caller numbers, SMS numbers, Viber/Telegram accounts, Facebook pages, or email addresses used.
Proof that they contacted your relatives, friends, employer, or co-workers.
Your loan reference number, if available.
A short timeline of what happened.

A practical tip: do not simply write “they harassed me.” Describe the exact act: “On June 3, 2026, at 9:14 a.m., collector number 09XX sent my sister a message saying I am a scammer and attached my photo.”

2. Report to the NPC for contact list harvesting, doxxing, or data privacy abuse

File with the National Privacy Commission when the app:

accessed your contacts without proper authority;
messaged people who were not guarantors or co-makers;
posted your photo, ID, or personal details;
used your contact list to shame you;
disclosed your debt to your employer, relatives, or friends;
threatened to publish your personal information;
required unnecessary app permissions before releasing a loan.

The NPC requires a formal complaint in a specific format. Its Filing a Complaint page states that the complaint form should be downloaded, printed, filled out, notarized, and submitted in person, by courier, or by scanned copy through email.

For NPC complaints, prepare:

notarized complaint-affidavit or NPC complaint form;
valid government ID;
screenshots of app permissions;
screenshots showing access to contacts or messages to contacts;
screenshots of public shaming posts;
proof of relationship of people contacted, if relevant;
app privacy policy, terms and conditions, and loan agreement;
phone numbers and account names of collectors;
proof that you asked the app to stop processing or disclosing your data, if available.

NPC cases can take time because the agency evaluates jurisdiction, completeness of documents, and whether the complaint meets procedural requirements. Notarization is a common bottleneck for OFWs and foreigners abroad. If you are outside the Philippines, you may need notarization before a Philippine consular officer or local notarization with apostille, depending on how the document will be used.

3. Report to PNP Anti-Cybercrime Group or NBI Cybercrime Division for threats and online crimes

Go to law enforcement when the app or collector:

threatens violence;
threatens to post edited or humiliating photos;
has already posted defamatory content;
uses fake accounts to impersonate you;
uses your ID for another loan or gambling account;
sends malicious messages to your contacts;
demands payment through intimidation;
operates as part of a larger scam.

You may report to the nearest police station for blotter purposes, but for cyber-related evidence, the more appropriate offices are usually:

PNP Anti-Cybercrime Group or its Regional Anti-Cybercrime Units;
NBI Cybercrime Division or the nearest NBI regional or district office.

The NBI lists its Cybercrime Division under its Divisions and Services page, with the Cybercrime Division email shown as ccd@nbi.gov.ph. The NBI also maintains a Report to NBI page.

For law enforcement, bring both digital and printed copies:

screenshots with date and time visible;
original messages on the phone, not just cropped screenshots;
links to posts, profiles, app pages, or websites;
phone numbers used by collectors;
call logs;
loan agreement or transaction record;
proof of payments made;
valid ID;
written narration or affidavit;
names and contact details of witnesses whose phones received harassment messages.

Do not delete the original messages. Investigators may need to see the device, metadata, links, and account identifiers. If the post is still live, save the URL and take a screen recording showing the profile, post, comments, date, and your phone’s date/time.

4. Report scam links and fake apps through CICC, 1326, or eGovPH eReport

The Cybercrime Investigation and Coordinating Center (CICC), under the DICT, coordinates cybercrime-related efforts and public scam reporting. The government has promoted 1326 as the National Anti-Scam Hotline, and scam links may also be reported through the eGovPH app’s eReport feature.

This channel is useful when:

you received a suspicious loan or gambling app link;
the app appears to be part of a scam network;
you want to report even before you become a victim;
you have screenshots of suspicious ads, SMS, or links.

For best results, submit:

suspicious URL;
screenshots of the ad or message;
sender number or account;
app name and developer name;
payment account details used by the scammer;
short explanation of why it appears fraudulent.

5. Report illegal gambling apps to PAGCOR and law enforcement

If the app involves online betting, casino games, sports betting, bingo, slots, or gambling “credits,” verify whether it is licensed. PAGCOR has public channels for regulatory concerns, including its PAGCOR Regulatory Contact page. PAGCOR has also announced tools to help the public verify whether online gaming sites are licensed.

Report to PAGCOR when:

the site or app claims to be licensed but cannot prove it;
a gambling app uses fake PAGCOR logos;
the app refuses withdrawals;
agents collect deposits through personal accounts;
the app gives gambling credit and harasses players for repayment;
the platform appears to target Filipinos without proper authority.

If threats, fraud, identity theft, or coercion are involved, also report to PNP ACG, NBI, or CICC. PAGCOR handles gaming regulatory concerns, while law enforcement handles criminal acts.

Step-by-Step Guide: What to Do When Collectors Start Harassing You

Step 1: Stop giving the app more access

Immediately check your phone permissions.

For Android:

Go to Settings.
Open Apps.
Select the loan or gambling app.
Tap Permissions.
Remove access to contacts, photos, camera, microphone, location, files, and SMS if not necessary.
Take screenshots before and after changing permissions.

For iPhone:

Go to Settings.
Scroll to the app.
Turn off contacts, photos, camera, microphone, and location access.
Check Privacy & Security settings for app permissions.

Do not uninstall the app immediately if it contains evidence. First take screenshots or screen recordings of loan details, account IDs, messages, payment instructions, and privacy permissions.

Step 2: Preserve evidence in an organized folder

Create folders labeled:

01 App Details
02 Loan Terms
03 Harassment Messages
04 Messages to Contacts
05 Payment Records
06 Reports Filed
07 Witness Screenshots

For each screenshot, keep the date visible if possible. Ask affected contacts to send you their own screenshots, not just forwarded images, because original screenshots from their phone are stronger.

Step 3: Do not respond emotionally to threats

Collectors often want panic. Avoid saying things like “I will destroy you,” “I will post you too,” or “I will not pay anything ever.” Angry replies can complicate the record.

Use short responses such as:

Please communicate only through lawful and official channels. Do not contact my relatives, employer, or other persons who are not parties to the loan. I am preserving your messages for reporting to the SEC, NPC, and law enforcement.

Do not admit to fraud if the issue is merely nonpayment. A debt is generally a civil obligation. Nonpayment of a loan, by itself, does not automatically mean you committed a crime.

Step 4: Verify whether the lender is legitimate

Check:

SEC registration name;
SEC Certificate of Authority for lending or financing;
whether the online lending platform is recorded with the SEC;
app name versus registered company name;
official address, email, and phone number;
whether the payment account is under the company name.

If payments are being demanded through random personal e-wallets or bank accounts, note this in your complaint.

Step 5: File reports with the correct agencies

A strong reporting sequence is:

SEC for lending violations and unfair debt collection.
NPC for privacy violations and contact harvesting.
PNP ACG or NBI Cybercrime Division for threats, cyberlibel, identity misuse, and online harassment.
CICC / 1326 / eGovPH eReport for scam links and coordinated fake app activity.
PAGCOR if the app involves illegal gambling or fake gaming operations.
Bank, e-wallet, or payment provider if you paid into a suspicious account.

Keep the ticket number, receiving copy, email acknowledgment, blotter number, or complaint reference number.

Step 6: Warn your contacts calmly

If the app already accessed your contacts, send a short message to people likely to be contacted.

Example:

Someone from a suspicious loan app may message you using my name or photo. Please do not engage, do not send money, and screenshot the message including the number or profile. The matter is being reported to the proper authorities.

This reduces panic and helps you gather evidence.

Step 7: Secure your accounts

Change passwords for:

email;
Facebook;
Messenger;
Viber;
Telegram;
GCash;
Maya;
online banking;
Apple ID or Google account.

Turn on two-factor authentication. If your SIM is being flooded with calls, ask your telco about spam blocking options and consider using call screening. Keep the SIM active if it is receiving evidence.

Documents and Evidence Checklist

Evidence	Why it matters
App name, app link, developer name	Identifies the platform
Screenshots of permissions	Shows possible excessive data access
Loan agreement or terms	Proves charges, due date, and lender details
Disbursement proof	Shows actual amount received
Payment records	Shows amounts paid and recipient accounts
Harassment screenshots	Shows unfair collection or threats
Messages sent to contacts	Supports privacy and reputational harm
Call logs	Shows frequency and numbers used
URLs of posts or profiles	Helps cybercrime investigators trace accounts
Valid ID	Required for formal complaints
Notarized affidavit	Often needed for NPC, NBI, prosecutor-level action
Witness screenshots	Strengthens proof of third-party harassment

Common Mistakes That Weaken Complaints

Deleting the app too early

Many victims uninstall the app out of fear. This may remove loan details, app permissions, account numbers, in-app messages, and other evidence. Capture everything first.

Sending only cropped screenshots

Cropped screenshots may remove dates, sender numbers, URLs, and context. Send full screenshots whenever possible.

Filing with only one agency

The SEC may address lending violations, but it will not prosecute every cybercrime. The NPC may address privacy violations, but threats may need PNP or NBI action. PAGCOR may handle gaming concerns, but fraud and coercion still require law enforcement.

Paying random accounts without verification

If you choose to pay a legitimate debt, pay only through a verified official channel. Ask for a statement of account and receipt. Paying a random collector’s personal e-wallet may not properly settle the account and may expose you to more demands.

Ignoring real legal notices

Some fake apps send fake notices, but legitimate lenders may also send real demand letters or file civil cases. Read carefully. A real court document will identify the court, case number, parties, and process server or sheriff. A random text saying “warrant of arrest today” for a small unpaid online loan is often intimidation, but do not ignore documents actually received from a court or prosecutor’s office.

Can You Be Arrested for Not Paying an Online Loan?

In general, nonpayment of debt alone is not a crime in the Philippines. The Constitution prohibits imprisonment for debt. A lender normally must pursue civil remedies, collection, or a proper case if there is a legally valid basis.

However, a borrower can face legal trouble if there is a separate criminal act, such as using a fake identity, submitting falsified documents, or intentionally defrauding another person from the beginning. Collectors often misuse the word “fraud” to scare borrowers, but actual fraud requires specific facts.

If a collector says police are coming to arrest you for nonpayment, ask for:

the case number;
the prosecutor’s office or court;
the complainant’s full legal name;
a copy of the complaint or subpoena;
the name and office of the officer handling the matter.

Do not rely on screenshots of “warrants” sent by collectors. Warrants and subpoenas follow formal legal procedures.

Special Notes for OFWs and Foreigners

Fake loan and gambling app harassment often affects OFWs because collectors contact relatives in the Philippines. Foreigners in the Philippines may also be targeted after using local SIMs, e-wallets, or apps.

Important practical points:

If you are abroad, ask affected relatives in the Philippines to preserve screenshots and file a local police blotter if they are being threatened.
For NPC or prosecutor-level filings, documents signed abroad may need consular notarization or apostille, depending on use.
If your Philippine SIM or e-wallet was used, report immediately to the telco or e-wallet provider.
If the app operator appears foreign but targets Philippine residents or uses Philippine payment channels, still report to Philippine agencies. The Data Privacy Act may apply when there is a Philippine link, such as processing personal information of Philippine citizens or residents.
If immigration, visa, or employment threats are being made against a foreigner, preserve those separately. Collectors have no authority to deport, blacklist, or arrest someone by themselves.

Frequently Asked Questions

How do I report a fake loan app in the Philippines?

Report it to the SEC through iMessage SEC if it is an unauthorized or abusive lending app. If it accessed your contacts or posted your personal information, also file with the National Privacy Commission. If there are threats, cyberlibel, identity misuse, or fake accounts, report to PNP ACG or the NBI Cybercrime Division.

Where do I report online lending app harassment?

For harassment by online lending collectors, report to the SEC for unfair debt collection, the NPC for data privacy violations, and PNP ACG or NBI for cybercrime or criminal threats. If the harassment is happening now and you feel unsafe, report first to the nearest police station or call emergency services.

Can a loan app message my contacts?

A loan app should not harvest or use your entire contact list for shaming or harassment. Character references may be used only within lawful, limited, and legitimate purposes. Messaging random contacts to shame you or pressure payment may violate the Data Privacy Act and NPC rules on loan-related transactions.

Is it legal for collectors to post my photo online?

Posting your photo with accusations such as “scammer,” “thief,” or “wanted” may create liability for cyberlibel, unjust vexation, violation of privacy, or unfair debt collection, depending on the facts. Save the post URL, screenshots, comments, profile link, and date/time before reporting.

Can I report a gambling app that refuses to release my winnings?

Yes. If the app appears to be an illegal or unlicensed gambling platform, report it to PAGCOR and law enforcement. If it took money through deception, also report it as a scam through CICC, PNP ACG, or NBI. Include deposit records, withdrawal requests, chat messages, and account details used for payment.

What if I really borrowed money? Can I still complain?

Yes. A real debt does not give collectors the right to harass, threaten, shame, or misuse your personal data. Your obligation to pay, if valid, is separate from the lender’s duty to follow Philippine law.

Should I block the collectors?

You may block abusive numbers for your safety, but first preserve evidence. Take screenshots of messages, call logs, and account details. If you block too early without saving proof, it may be harder to show the pattern of harassment.

Do I need a notarized affidavit?

For informal reports or initial online tickets, screenshots and a written narration may be accepted. For formal complaints, especially before the NPC, NBI, or prosecutor’s office, a notarized complaint-affidavit is often required. The NPC specifically requires a formal complaint form that is printed, filled out, notarized, and submitted through its allowed channels.

How long do these complaints take?

Timelines vary. Acknowledgment of an online ticket may come within days, but investigation can take weeks or months depending on evidence, agency workload, whether the app operator can be identified, and whether other victims filed similar complaints. Cases involving foreign operators, fake identities, multiple SIMs, or deleted accounts usually take longer.

Can the app be removed from Google Play or Apple App Store?

Yes, app stores may remove apps that violate platform policies, especially when there are regulatory findings or multiple user reports. Report the app directly in the app store and attach evidence when possible. Also report to Philippine agencies because app removal alone does not preserve your legal remedies or stop the operators from launching another app under a new name.

Key Takeaways

Fake loan apps and illegal gambling apps often violate several laws at once: lending regulations, data privacy law, cybercrime law, gambling rules, and criminal laws on threats or defamation.
Report abusive lending apps to the SEC, especially if they are unregistered, unrecorded, misleading, or using unfair collection practices.
Report contact harvesting, doxxing, public shaming, and misuse of personal information to the National Privacy Commission.
Report threats, cyberlibel, fake accounts, identity misuse, and online harassment to PNP ACG or the NBI Cybercrime Division.
Report scam links and suspicious fake apps through CICC, Hotline 1326, or eGovPH eReport.
Report illegal or suspicious gambling apps to PAGCOR and law enforcement.
Preserve evidence before deleting the app, blocking numbers, or changing phones.
A real debt does not authorize harassment, public shaming, or illegal access to your contacts.
Nonpayment of debt alone generally does not justify arrest, but fake documents, fraud, or identity misuse can create separate legal issues.
The stronger your timeline, screenshots, URLs, payment records, and witness evidence, the more useful your complaint will be.