The rapid digitization of the Philippine financial landscape has ushered in a wave of convenience through Online Lending Platforms (OLPs). However, this "fintech" boom has also paved the way for predatory entities. Many Filipinos find themselves trapped by illegal lenders (unregistered entities) or subjected to abusive collection practices that violate human dignity and data privacy.

As the primary regulatory body, the Securities and Exchange Commission (SEC) provides the legal mechanism to hold these entities accountable.

I. Legal Framework and Jurisdiction

In the Philippines, lending and financing activities are strictly regulated. An entity must possess two distinct licenses to operate legally:

Certificate of Incorporation: Proof that the entity is a registered corporation.
Certificate of Authority (CA): A specific license issued by the SEC to operate as a lending or financing company.

Operating an online lending app without a CA is a violation of Republic Act No. 9474 (Lending Company Regulation Act of 2007) or Republic Act No. 8556 (Financing Company Act of 1998). Furthermore, the SEC issued Memorandum Circular No. 18, Series of 2019 (SEC MC 18), which specifically prohibits unfair debt collection practices.

II. Identifying "Illegal" vs. "Abusive" Apps

Before filing a report, it is crucial to categorize the violation:

1. Illegal Lending Apps

These are apps that operate without SEC registration or a Certificate of Authority. Even if they are registered as a corporation, if they lack the CA to operate as a lender, their lending activities are unauthorized.

2. Abusive Collection Practices

Even registered companies can be reported if they employ "Standard Abusive Practices" defined under SEC MC 18, which include:

Harassment or Threats: Using profane language or threatening physical harm.
Public Shaming: Contacting persons in the borrower’s contact list without consent or posting the borrower's debt on social media.
False Representation: Claiming to be lawyers, court officials, or government agents to intimidate the borrower.
Midnight Calls: Contacting the borrower between 10:00 PM and 6:00 AM, unless stipulated and agreed upon.

III. Pre-Reporting: Evidence Gathering

The SEC requires substantial evidence to initiate an investigation. "He Said, She Said" is rarely sufficient. You must document the following:

Screenshots: Capture the app's name, the loan terms, and the specific abusive messages (SMS, Viber, WhatsApp, or Facebook).
Call Logs and Recordings: Record the frequency of calls and, if possible, the content of the conversation (ensure you inform the caller you are recording if pursuing criminal charges under the Anti-Wiretapping Act).
Loan Documents: Digital copies of the disclosure statements and promissory notes.
Social Media Proof: Screenshots of public posts or messages sent to your contacts.

IV. The Step-by-Step Reporting Process

The SEC handles these complaints through the Corporate Governance and Finance Department (CGFD) or the Enforcement and Investor Protection Department (EIPD).

Step 1: Verify the App’s Status

Check the SEC website for the "List of Recorded Online Lending Platforms." If the app is not on the list of companies with a Certificate of Authority, it is likely an illegal operation.

Step 2: Prepare the Formal Complaint

While an informal email may get attention, a Formal Letter-Complaint is more effective. It should include:

Full name and contact details of the complainant.
Complete name of the lending app and the company behind it (if known).
A detailed chronological narrative of the abuse or the discovery of the illegal operation.
Specific demands (e.g., "cease and desist" from harassment).

Step 3: Submission Channels

You may submit your complaint through the following channels:

Email: Send the complaint and evidence to cgfd_vfce@sec.gov.ph (for violations of MC 18) or epd@sec.gov.ph (for unregistered/illegal lenders).
SEC i-Message: Utilize the SEC’s online portal for complaints.
Physical Filing: Visit the SEC Headquarters or any SEC Extension Office (Cebu, Davao, Iloilo, etc.).

V. Inter-Agency Cooperation

Often, a violation by a lending app covers multiple jurisdictions. For a comprehensive legal attack, consider filing simultaneous reports with:

Agency	Violation Handled
National Privacy Commission (NPC)	Unauthorized access to phone contacts or data breaches.
PNP Anti-Cybercrime Group (ACG)	Identity theft, online threats, and cyber-harassment.
Department of Justice (DOJ)	Criminal prosecution for violations of the Cybercrime Prevention Act.

VI. Important Legal Considerations

Note on Debt Obligation: Reporting an app to the SEC for abuse does not automatically extinguish your civil obligation to pay a legitimate principal debt. However, the SEC can impose administrative fines, suspend licenses, or even order the permanent shutdown of the app.

Under the "Clean Hands Doctrine," the SEC prioritizes cases where the lender has clearly overstepped legal boundaries, regardless of the borrower's default status. Persistent reporting by victims is the primary way the SEC builds "Cease and Desist Orders" (CDOs) against these predatory digital entities.