How to Report Online Lending App Harassment and Blackmail to the SEC and NPC

The proliferation of Online Lending Applications (OLAs) in the Philippines has provided quick financial relief for many, but it has also birthed a wave of predatory practices. Harassment, debt shaming, and the unauthorized use of personal data have become common tactics employed by unscrupulous lenders. For victims, the legal system provides specific avenues for redress through the Securities and Exchange Commission (SEC) and the National Privacy Commission (NPC).


1. Understanding the Legal Framework

In the Philippines, OLAs are governed by two primary sets of regulations:

  • SEC Memorandum Circular No. 18, Series of 2019: This prohibits "Unfair Debt Collection Practices." It forbids the use of threats, profanity, and the disclosure of a borrower's debt to third parties (debt shaming).
  • Republic Act No. 10173 (Data Privacy Act of 2012): This protects the personal information of borrowers. Accessing a borrower's contact list without explicit, informed consent for a specific purpose is a violation of this Act.

2. Essential Evidence Collection

Before filing a formal complaint, you must document the harassment systematically. Authorities require "substantial evidence" to take action.

  • Screenshots: Capture all threatening text messages, emails, and social media posts. Ensure the sender's number or account name is visible.
  • Call Logs: Keep a record of the frequency and timing of calls. If possible, record the audio of the harassment (noting that in some legal contexts, recording without consent is sensitive, though often admissible in harassment cases).
  • Proof of Debt Shaming: If the lender contacted people in your phone book or posted on your social media timeline, get screenshots of those specific interactions from the perspective of the third party.
  • App Details: Save the OLA’s full name, the company name behind the app (often found in the "About" section), and their registered address if available.

3. Reporting to the Securities and Exchange Commission (SEC)

The SEC oversees the licensing and conduct of financing and lending companies. If an OLA is harassing you, they are likely violating SEC MC No. 18.

Steps to File:

  1. Verify Registration: Check the SEC website for the List of Recorded OLAs and the List of Lending Companies with Certificate of Authority (CA). If they are not on the list, they are operating illegally.
  2. Draft a Formal Letter: Address your complaint to the Corporate Governance and Finance Department (CGFD) of the SEC.
  3. Include Mandatory Details: Your full name, contact details, the name of the OLA, and a detailed narration of the unfair collection practices.
  4. Submission: Send the complaint via email to cgfd_enforcement@sec.gov.ph or epd@sec.gov.ph.

Prohibited Acts under SEC MC 18 include:

  • Using or threatening to use physical violence.
  • Using insults or profane language.
  • Disclosing the borrower's name as a "delinquent" in public.
  • Contacting persons in the borrower's contact list who are not co-makers or guarantors.

4. Reporting to the National Privacy Commission (NPC)

If the OLA accessed your contacts, photos, or social media accounts without proper authorization, or shared your data to shame you, this is a Data Privacy violation.

Steps to File:

  1. The "Request for Assistance" (RFA): The NPC usually requires you to contact the OLA first to demand they stop processing your data. If they ignore you or continue the harassment, move to a formal complaint.
  2. File a Formal Complaint: Use the NPC’s official Complaint Form.
  3. Required Documents: * A notarized Complaint Affidavit.
    • Copies of the evidence collected.
    • A copy of your government-issued ID.
  4. Submission: Submit through the NPC's Complaints and Investigation Division (CID) via email at complaints@privacy.gov.ph.

Common NPC Violations:

  • Unauthorized Processing: Accessing your phone's contact list to blast messages to your friends and family.
  • Malicious Disclosure: Sharing sensitive personal information with the intent to cause harm or humiliation.

5. Summary of Roles and Remedies

Agency Primary Focus Key Penalty for OLA
SEC Business conduct and licensing Revocation of Certificate of Authority; Fines up to ₱1,000,000.
NPC Data protection and privacy Large administrative fines; Criminal prosecution for officers.
PNP-ACG / NBI Cybercrime and threats Imprisonment under the Cybercrime Prevention Act.

6. Escalation to Cybercrime Authorities

If the harassment includes death threats, extortion, or blackmail (sextortion) using manipulated images, you should immediately escalate the matter to:

  • PNP Anti-Cybercrime Group (ACG): Visit their office at Camp Crame or report via their Facebook page or website.
  • NBI Cybercrime Division (NBI-CCD): File a report at the NBI main office or their regional branches.

7. Practical Safety Measures

While the legal process unfolds, take these steps to mitigate immediate harm:

  • Adjust Privacy Settings: Set all social media profiles to private and restrict who can tag you or comment on your posts.
  • Inform Your Contacts: Send a generic message to your contacts: "My phone has been compromised by a predatory lending app. Please ignore any messages regarding my personal finances or character. I am currently taking legal action."
  • Do Not Pay via Unofficial Channels: Scammers often pretend to be OLA agents to intercept payments. Only pay through the app's official gateways.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.