In recent years, the proliferation of Online Lending Applications (OLAs) has led to a surge in reports concerning predatory lending practices and unethical collection methods. In the Philippines, these actions are not merely "rude"—they are often illegal violations of circulars issued by the Securities and Exchange Commission (SEC) and the National Privacy Commission (NPC).
This guide outlines the legal framework and the step-by-step process for filing formal complaints against abusive OLAs.
I. Understanding Your Legal Protections
Before filing a complaint, it is essential to identify which laws or regulations are being violated.
1. SEC Memorandum Circular No. 18, Series of 2019
This circular prohibits Unfair Debt Collection Practices. Lending and financing companies are strictly forbidden from:
- Using threat of symbols, violence, or other criminal means to harm a person, their reputation, or property.
- Using profane or abusive language.
- Debt Shaming: Disclosing or threatening to disclose the borrower's name and debts to the public or third parties (unless authorized by law).
- Contacting persons in the borrower’s contact list without express consent.
- Misrepresenting themselves as lawyers, police officers, or government agents.
2. Republic Act No. 10173 (Data Privacy Act of 2012)
Most OLAs require access to your phone’s contacts, gallery, and social media. Using this information to harass you or your contacts is a violation of the Data Privacy Act. The NPC prohibits:
- Unauthorized Processing: Accessing data for purposes other than what was agreed upon.
- Malicious Disclosure: Publishing your personal information to cause harm or embarrassment.
II. Reporting to the Securities and Exchange Commission (SEC)
The SEC oversees the registration and behavior of lending companies. If an OLA is unregistered or engaging in unfair collection practices, the SEC is the primary regulatory body.
Step 1: Verify the OLA’s Registration
Check the SEC website for the List of Recorded Lending Companies and Financing Companies. Importantly, an OLA must have a Certificate of Authority (CA) to operate as a lending platform. If they do not have a CA, they are operating illegally.
Step 2: Gather Evidence
- Screenshots of threatening text messages or emails.
- Call logs and recordings of abusive agents.
- Screenshots of the OLA’s interface and the loan agreement.
- Proof of unauthorized contact with your friends/family.
Step 3: File the Complaint
- Download the Formal Complaint Form: Visit the SEC website and look for the "Lending/Financing Companies" complaint section.
- Submit via Email: Send your formal complaint and evidence to the Corporate Governance and Finance Department (CGFD) at
cgfd_enforcement@sec.gov.phorepd@sec.gov.ph. - Physical Submission: You may also visit the SEC Secretariat Building at the PICC Complex, Pasay City.
III. Reporting to the National Privacy Commission (NPC)
If the harassment involves "debt shaming" (e.g., posting your ID on social media, messaging your contact list, or hacking your account), the NPC handles the data privacy aspect.
Step 1: The "Discovery" Requirement
The NPC usually requires that you first attempt to contact the OLA’s Data Protection Officer (DPO) to raise your concern. If they ignore you or provide an unsatisfactory response, you proceed to a formal complaint.
Step 2: Prepare the Formal Complaint (Appointed Form)
The NPC requires a notarized Complaints Assistance Form. You must provide:
- Your full details.
- The specific personal data breached.
- Details of how the OLA accessed/misused your data.
Step 3: Submission
- Online: Submit through the NPC Complaints Management System (CMS) on their official website.
- Email: You can send inquiries to
complaints@privacy.gov.ph. - Office: Visit the NPC office at the Philippine International Convention Center (PICC), Pasay City.
IV. Summary of Jurisdictions
| Issue | Primary Agency | Legal Basis |
|---|---|---|
| Harassment, threats, and insults | SEC | SEC MC No. 18, s. 2019 |
| Unauthorized access to contacts | NPC | Data Privacy Act (RA 10173) |
| Debt shaming on Social Media | NPC / PNP Cybercrime | RA 10173 / Cybercrime Law |
| Operating without a license | SEC | Lending Company Regulation Act |
| Cyber-libel or grave threats | PNP-ACG / NBI | Revised Penal Code / RA 10175 |
V. Critical Practical Steps for Victims
- Do Not Delete Anything: In the heat of the moment, victims often delete the app or the messages. Stop. These are your primary pieces of evidence. Back them up to a cloud drive.
- Contact the PNP-ACG: For immediate threats to physical safety or extreme cases of cyber-libel, file a report with the Philippine National Police - Anti-Cybercrime Group (PNP-ACG) via their Facebook page or local field offices.
- Inform Your Contacts: If the OLA has hacked your contact list, send a mass message or post a disclaimer stating that your phone has been compromised and that they should ignore any messages regarding your alleged debts.
- Cease Communication with Harassers: Once you have documented the abuse, stop engaging with the agents. Direct communication often leads to more stress and rarely resolves the legal issue.
Legal Note: Reporting to the SEC or NPC does not automatically "extinguish" a legitimate debt. You are still civilly liable for the principal amount borrowed. However, the OLA’s illegal harassment constitutes a separate administrative and criminal liability that can lead to the revocation of their license and the filing of criminal charges against their officers.