If an online lending app has threatened you, shamed you to your contacts, used your photos, charged hidden fees, demanded payment through suspicious personal accounts, or pretended to be a legitimate lender, you do not have to handle it by yourself. In the Philippines, complaints about online lending app scams usually involve three overlapping issues: unfair debt collection, data privacy violations, and possible cybercrime or fraud. This guide explains where to report each problem, what evidence to prepare, what laws protect you, and what realistically happens after you file.
What Counts as an Online Lending App Scam in the Philippines?
People often use “online lending app scam” to describe different situations. The correct reporting office depends on what actually happened.
An online lending app concern may involve:
| Situation | What it usually means | Main office to report to |
|---|---|---|
| The app is not SEC-authorized | The lender may not have authority to operate as a lending or financing company | SEC |
| The app threatens, insults, shames, or contacts your phone contacts | Possible unfair debt collection and privacy violation | SEC and NPC |
| The app harvested contacts, photos, IDs, selfies, or social media data | Possible Data Privacy Act violation | NPC |
| Someone used your name, ID, or phone number to borrow | Possible identity theft or cybercrime | PNP-ACG or NBI Cybercrime |
| You paid “processing fees” but no loan was released | Possible fraud or estafa | PNP-ACG, NBI, or local police/prosecutor |
| Payment was sent through a bank, e-wallet, or remittance account | Possible financial fraud involving a supervised financial institution | Bank/e-wallet first, then BSP if unresolved |
Some abusive online lenders are real companies but violate collection rules. Others are outright fake apps. Treat the problem as urgent if there are threats of violence, blackmail, fake social media posts, unauthorized use of your ID, or demands that relatives or coworkers pay.
Your Legal Rights Against Abusive Online Lending Apps
SEC rules on unfair debt collection
The Securities and Exchange Commission (SEC) regulates lending companies under Republic Act No. 9474, or the Lending Company Regulation Act of 2007, and financing companies under Republic Act No. 8556, or the Financing Company Act of 1998. Financing companies must be authorized by the SEC, and the law prohibits holding oneself out as a financing company without authority. (Lawphil)
For collection practices, the key rule is SEC Memorandum Circular No. 18, Series of 2019, which applies to financing companies, lending companies, and their third-party collection agents. It prohibits acts such as:
- Threatening violence or other criminal means to harm a person, reputation, or property
- Threatening legal action that cannot legally be taken
- Using obscene, insulting, or profane language
- Publishing or disclosing a borrower’s name or personal information because of alleged non-payment
- Communicating false loan information
- Using deception to collect a debt or obtain borrower information
- Contacting borrowers at unreasonable times, generally before 6:00 a.m. or after 10:00 p.m.
- Contacting people in the borrower’s contact list who are not named guarantors or co-makers
The SEC may impose administrative penalties, including fines, suspension, or revocation of the lending or financing company’s authority, depending on the violation.
Data privacy rights
Online lending apps often ask for phone permissions, IDs, selfies, employment details, contact lists, location, or gallery access. Under Republic Act No. 10173, or the Data Privacy Act of 2012, personal information must be processed fairly, lawfully, and only for legitimate purposes.
The National Privacy Commission (NPC) has repeatedly treated online lending complaints seriously, especially when apps use phone contacts and personal data for harassment and public shaming. NPC guidance states that lenders are prohibited from harvesting phone and social media contact lists for harassing delinquent borrowers. (National Privacy Commission)
In the 18 March 2026 joint advisory of the DICT, NPC, and SEC, the government reiterated that online lending platforms may not require unnecessary app permissions, may not process personal data excessively, and may not contact persons in the borrower’s contact list except guarantors for debt collection purposes.
Cybercrime and criminal laws
If the online lending app or collector used fake accounts, hacked access, identity theft, phishing, blackmail, fraudulent links, or online threats, the matter may fall under Republic Act No. 10175, or the Cybercrime Prevention Act of 2012. Possible cybercrime issues include computer-related fraud, computer-related identity theft, cyber libel, or crimes under the Revised Penal Code committed through information and communications technology. (Lawphil)
Depending on the facts, the following Revised Penal Code provisions may also be relevant:
- Article 315, Estafa — for deceit or fraudulent acts causing damage
- Article 282, Grave Threats — for threats to commit a wrong amounting to a crime
- Article 286, Grave Coercions — for compelling someone to do something against their will through violence, threats, or intimidation
- Article 287, Unjust Vexation — sometimes raised for persistent harassment
- Articles 353 to 355, Libel — if false and defamatory statements are published, including possible cyber libel if done online
The Civil Code may also help in civil claims. Article 19 requires every person to act with justice, give everyone their due, and observe honesty and good faith. Articles 20 and 21 may support claims for damages when a person willfully causes harm contrary to law, morals, good customs, or public policy.
Truth in lending and hidden charges
Under Republic Act No. 3765, or the Truth in Lending Act, lenders must disclose the true cost of credit. The Supreme Court has emphasized that borrowers should be protected from lack of awareness of the true cost of credit, including interest and finance charges.
This matters when an app advertises “low interest” but the borrower receives much less than the approved amount because of hidden service fees, processing fees, insurance fees, extension fees, or daily penalties.
Where to Report Online Lending App Scams
Quick reporting guide
| Problem | Report to | Official channel |
|---|---|---|
| Unfair debt collection, harassment, threats by collectors, unauthorized OLP | SEC Financing and Lending Companies Department | SEC iMessage portal |
| Misuse of contacts, photos, IDs, personal data, public shaming | National Privacy Commission | NPC complaint page |
| Cyber threats, identity theft, fake accounts, blackmail, phishing, scam links | PNP Anti-Cybercrime Group or NBI Cybercrime Division | acg@pnp.gov.ph / ccd@nbi.gov.ph |
| Scam or fraud involving bank or e-wallet transfer | Bank/e-wallet first; BSP if unresolved | BSP Online Buddy and consumer channels |
| Urgent physical threat | Local police station or emergency response | Nearest police station or 911 |
The 2026 DICT-NPC-SEC advisory specifically lists the SEC for unfair debt collection practices, and the DICT Cyber Hotline, NBI Cybercrime Division, and PNP Anti-Cybercrime Group for harassment, threats, fraud, and scams.
Before You File: Preserve Evidence First
Do not rely on memory. Online lending app cases are evidence-heavy.
Before deleting the app or blocking everyone, save the proof:
Screenshot the app details
- App name
- Developer name
- App store link
- Website or Facebook page
- Privacy policy
- Terms and conditions
- Loan agreement or disclosure statement
Screenshot the loan details
- Approved amount
- Actual amount received
- Interest
- Processing fees
- Due date
- Penalties
- Payment instructions
- Reference numbers
Save harassment evidence
- SMS messages
- Viber, Messenger, WhatsApp, Telegram, or email messages
- Call logs
- Voice recordings, if available
- Threats sent to relatives, coworkers, or contacts
- Fake posts, edited photos, or group chats
Ask affected contacts to send screenshots
- Include the sender’s number, username, date, and time
- Ask them not to delete the message
- If possible, ask them to write a short statement of what happened
Save payment proof
- GCash, Maya, bank, remittance, or crypto transfer receipts
- Account name and number
- QR code
- Transaction reference number
- Date and exact amount
Write a timeline
- Date you downloaded the app
- Date you applied
- Amount requested
- Amount received
- Date harassment started
- Names or numbers of collectors
- Dates you reported to the company or authorities
Secure your accounts
- Revoke app permissions
- Change passwords
- Enable two-factor authentication
- Warn relatives not to pay anyone claiming to collect for you
- Report unauthorized SIM, e-wallet, or bank activity immediately
How to Report to the SEC
Report to the SEC when the issue involves a lending company, financing company, online lending platform, or collection agency.
Step-by-step SEC complaint process
Go to the SEC iMessage portal
Use the SEC iMessage portal. The SEC’s public portal allows users to open a new ticket and check ticket status. (Securities and Exchange Commission)
Choose the correct department or service
For online lending complaints, choose the service related to the Financing and Lending Companies Department. The SEC’s iMessage user manual lists “Complaints on Financing and Lending Companies” under the Legal and Enforcement Division.
Identify the respondent clearly
Do not write only the app nickname if you can find more details. Include:
- App name
- Corporate name
- SEC registration number, if shown
- Certificate of Authority number, if shown
- Website, Facebook page, or app store link
- Collector names, phone numbers, and email addresses
- Payment account names and numbers
State what happened in plain language
Example:
“I borrowed ₱5,000 but received only ₱3,200 after hidden deductions. Before the due date, collectors threatened to post my ID and contacted my employer and phone contacts who were not guarantors. They used insulting language and demanded payment through a personal GCash account.”
Attach evidence
Upload screenshots, loan documents, receipts, call logs, and messages. Label files clearly, such as:
LoanAgreement_AppName.pdfThreat_SMS_CollectorNumber_2026-06-12.pngGCashPayment_ReferenceNo.pdfMessagesToContacts.pdf
Ask for specific action
You may request the SEC to:
- Investigate unfair debt collection practices
- Verify whether the app is authorized
- Direct the company to stop unlawful collection conduct
- Check non-disclosure of rates, fees, and charges
- Impose appropriate administrative sanctions
Monitor your ticket
Keep your SEC ticket number. Add follow-up evidence if harassment continues.
Practical realities with SEC complaints
SEC complaints are usually administrative. They can help discipline or sanction lending and financing companies, but they are not always the fastest way to recover money from a scammer. If there is actual fraud, identity theft, blackmail, or threats, also report to law enforcement.
How to Report to the National Privacy Commission
Report to the NPC if the app misused personal data, accessed contacts without proper basis, sent your loan information to third parties, used your photos or ID for shaming, or refused to delete or stop processing unnecessary data.
What the NPC requires
The NPC requires a formal complaint in a specific format. A complainant may file a notarized complaint-assisted form or verified complaint, together with evidence and witness affidavits. The NPC accepts filing personally, by registered mail, by courier, or by authorized electronic mail. (National Privacy Commission)
The NPC complaint page states that data subjects may file complaints, and a representative may file with a Special Power of Attorney. (National Privacy Commission)
Step-by-step NPC complaint process
Download the NPC complaint-assisted form
Use the NPC file-a-complaint page.
Prepare a verified or notarized complaint
Include:
- Your name and contact details
- Name of the app or company
- Description of the personal data misused
- How the app obtained the data
- How the data was used for harassment, shaming, or unauthorized disclosure
- Dates, screenshots, and witness details
Attach evidence
Attach screenshots showing:
- Access to contacts, gallery, camera, or location
- Messages sent to your contacts
- Posts using your photo, ID, or name
- Threats to disclose personal information
- Privacy policy or consent screen, if available
Have the complaint notarized
This is a common bottleneck. If you are abroad, you may need consular notarization at a Philippine embassy or consulate, or local notarization with apostille, depending on where the document is executed and how it will be submitted.
Submit to the NPC
The NPC allows submission in person, by courier, registered mail, or authorized email. Electronic documents should be in PDF format if practicable. (National Privacy Commission)
Track the timeline
The NPC states that its Complaints and Investigation Division has 30 calendar days from receipt to give due course or dismiss the complaint without prejudice. It also states that the entire process up to final adjudication should take about 10 to 12 months. If there is an application for a temporary ban on processing personal data, that process may happen within about one to two weeks after filing, subject to requirements. (National Privacy Commission)
How to Report to PNP-ACG, NBI, or DICT for Cybercrime and Fraud
Go to law enforcement if the conduct is criminal or urgent.
Report to the PNP Anti-Cybercrime Group or NBI Cybercrime Division when there is:
- Identity theft
- Fake loan under your name
- Blackmail
- Threats of violence
- Fake Facebook posts
- Edited photos
- Phishing links
- Hacked accounts
- Fraudulent advance fees
- Scam payment accounts
- Use of your ID or selfie for another transaction
The 2026 advisory lists these reporting channels:
| Office | Email / contact |
|---|---|
| DICT Cyber Hotline | 1326@dict.gov.ph |
| NBI Cybercrime Division | ccd@nbi.gov.ph; telephone (632) 8523-8231 to 38 |
| PNP Anti-Cybercrime Group | acg@pnp.gov.ph; onlinecims.ocs@gmail.com; telephone (632) 8723-0401 local 7491 |
For urgent physical threats, go to the nearest police station immediately. A cybercrime complaint may later be referred for investigation, digital forensics, or filing before the Office of the City or Provincial Prosecutor.
If You Paid Through GCash, Maya, Bank, or Remittance
If money was sent through a bank or e-wallet, report the transaction to the provider immediately. Ask for:
- Account freezing or hold, if still possible
- Transaction investigation
- Reference number
- Written response
- Copy of your complaint report
If the bank, e-wallet, or other Bangko Sentral-supervised institution does not resolve the issue, you may escalate through the BSP Consumer Assistance Mechanism. BSP states that consumers should first report to the institution’s own Financial Consumer Protection Assistance Mechanism, then escalate through BSP Online Buddy (BOB) if unsatisfied.
BSP also clarifies that complaints about financing companies, lending companies, online lending apps, platforms, and collection agencies are best directed to the SEC because the SEC regulates these institutions.
Required Documents and Evidence Checklist
| Document or evidence | SEC | NPC | PNP/NBI |
|---|---|---|---|
| Valid government ID | Helpful | Usually needed | Usually needed |
| Loan agreement or disclosure statement | Important | Helpful | Helpful |
| App screenshots and app store link | Important | Important | Important |
| Messages from collectors | Important | Important | Important |
| Messages sent to contacts | Important | Important | Important |
| Payment receipts | Important | Helpful | Important |
| Call logs and phone numbers | Important | Helpful | Important |
| Complaint-affidavit | Sometimes requested | Required in verified/notarized form | Commonly required |
| Witness statements from contacts | Helpful | Helpful | Helpful |
| Special Power of Attorney | If representative files | Required for representative | Often required for representative |
Common Mistakes That Weaken Complaints
Reporting only the app name
Many scam apps use different app names, trade names, corporate names, and collection account names. Always look for the registered corporate operator and payment account holder.
Deleting the app too early
You may need screenshots of permissions, loan terms, privacy policy, and in-app messages. Capture evidence first, then revoke permissions.
Paying to personal accounts without verification
A legitimate lender should have consistent, verifiable payment channels. Be careful with payment demands sent through random personal e-wallet accounts.
Posting angry accusations online
It is understandable to feel angry, but public posts naming individuals as scammers without evidence may expose you to counterclaims, including libel or cyber libel. Report with evidence through official channels instead.
Thinking barangay mediation can solve a cybercrime case
A barangay blotter may document harassment, especially if the collector is known locally. But online fraud, identity theft, and cyber harassment usually need police, NBI, PNP-ACG, prosecutor, SEC, or NPC action.
Assuming non-payment means automatic jail
The Philippine Constitution prohibits imprisonment for debt. However, a person may still face a criminal complaint if there is alleged fraud, falsification, identity theft, or deceit separate from simple inability to pay. A genuine loan dispute is different from a scam.
What OFWs and Foreigners Should Know
If you are an OFW or a foreigner outside the Philippines, you can still report a Philippine online lending app if the company operates in the Philippines, targets Philippine borrowers, or processes your personal data in connection with a Philippine transaction.
Practical points:
- Use a representative in the Philippines if documents must be physically filed.
- Execute a Special Power of Attorney if someone will file or follow up for you.
- For documents signed abroad, ask the Philippine embassy or consulate about consular notarization, or check whether apostille is accepted for your document.
- Keep screenshots showing Philippine phone numbers, payment channels, addresses, and SEC-related claims.
- If your foreign bank, card, or overseas remittance account was used, report to that institution immediately as well.
- If the app has no Philippine entity, report to the platform, your local police or cybercrime office abroad, and any payment provider used.
Can You Stop Paying an Online Lending App After Reporting It?
Be careful. Filing a complaint does not automatically erase a real loan. If you genuinely received money from a legitimate lender, the principal obligation may still exist.
A safer approach is:
- Dispute illegal, hidden, unexplained, or excessive charges in writing.
- Ask for a statement of account and full computation.
- Pay only through verified official channels.
- Do not pay through personal accounts unless the company confirms in writing that the account is official.
- Do not pay “extension fees” endlessly without reducing principal.
- Keep proof of every payment.
Philippine courts may reduce unconscionable interest or refuse to enforce one-sided interest changes in proper cases, especially where the borrower was not clearly informed of the true cost of credit.
Frequently Asked Questions
Where do I report online lending app harassment in the Philippines?
Report unfair collection practices to the SEC through the SEC iMessage portal. If the app used your contacts, photos, ID, or personal data for harassment, also file with the NPC. If there are threats, blackmail, fake accounts, identity theft, or fraud, report to PNP-ACG or NBI Cybercrime.
Can an online lending app contact my phone contacts?
Generally, contacting people in your phone contacts who are not guarantors or co-makers is a serious violation. The 2026 DICT-NPC-SEC advisory says persons in the borrower’s contact list should not be contacted for debt collection except guarantors, and SEC MC No. 18 treats contact with non-guarantor contacts as unfair debt collection.
Can a lending app post my photo or ID online?
Posting your photo, ID, loan information, or personal details to shame you may be an unfair debt collection practice, a privacy violation, and possibly a criminal matter depending on the content and circumstances. Save screenshots and report to SEC, NPC, and law enforcement if threats or fake posts are involved.
What if someone used my name to borrow from a lending app?
Report it as possible identity theft or fraud to PNP-ACG or NBI Cybercrime. Also notify the lending app in writing that you dispute the loan and ask it to preserve records, including application data, IP logs, device information, submitted ID, selfie, and disbursement account.
Is high interest alone enough to file a complaint?
High interest by itself is not always treated the same as harassment or fraud. But you should report if the app failed to disclose the true cost of credit, deducted hidden charges, misrepresented terms, imposed unexplained penalties, or used abusive collection methods.
How do I know if an online lending app is legit?
Check whether the operator has both SEC corporate registration and the proper Certificate of Authority to operate as a lending or financing company. Also check whether the app or online lending platform is connected to that authorized company. Do not rely only on the phrase “SEC registered.”
Can I recover money paid to a scam lending app?
Possibly, but it depends on how fast you report, where the money went, and whether the receiving account can still be traced or frozen. Report immediately to the bank or e-wallet used, then to law enforcement. SEC and NPC complaints may sanction companies, but recovery of money usually requires payment-provider action, criminal investigation, settlement, or court proceedings.
Do I need a lawyer to report an online lending app?
For basic SEC, NPC, BSP, PNP, or NBI reporting, many people file on their own. A lawyer becomes more useful if you need a notarized complaint, a formal complaint-affidavit, representation from abroad, a civil damages claim, or defense against a collection case.
Can I file if I am abroad?
Yes, but notarization, affidavits, and representative authority may take longer. Prepare a Special Power of Attorney if someone in the Philippines will file or follow up for you. Keep all digital evidence with dates, times, phone numbers, and payment references.
Key Takeaways
- Report unfair debt collection and unauthorized lending activity to the SEC.
- Report misuse of contacts, photos, IDs, selfies, and personal data to the NPC.
- Report threats, blackmail, identity theft, fake accounts, phishing, and fraud to PNP-ACG or NBI Cybercrime.
- If payment passed through a bank, e-wallet, or remittance channel, report to the provider immediately and escalate to BSP if unresolved.
- Preserve screenshots, call logs, payment receipts, app details, and messages before deleting anything.
- A real debt does not allow a lender to shame you, threaten you, contact non-guarantor contacts, or misuse your personal data.
- Filing a complaint does not automatically cancel a valid loan, but it can help stop abusive practices and create an official record for enforcement.