If an online lending app in the Philippines is harassing you, shaming you to your contacts, demanding “processing fees” before releasing a loan, pretending to be SEC-registered, or using threats to force payment, you can report it to the Securities and Exchange Commission. The important thing is to file the complaint in the right channel and submit evidence that clearly shows who the app is, what happened, when it happened, and how it violated lending, consumer protection, privacy, or criminal laws.

What counts as an online lending app scam in the Philippines?

Not every bad experience with a loan app is automatically a “scam.” A legitimate lender may still collect a valid debt, charge agreed fees, or remind a borrower of due dates. The problem starts when the app or its agents use unlawful, abusive, deceptive, or unauthorized methods.

Common online lending app complaints handled or acted on by regulators include:

Advance-fee loan scams — the app or agent asks you to pay a “processing fee,” “insurance fee,” “activation fee,” “collateral fee,” or “tax” before releasing a loan, then never releases the money.
Unregistered or unrecorded online lending platforms — the app offers loans even though the company has no SEC Certificate of Authority or the platform is not recorded with the SEC.
Harassment and public shaming — agents threaten you, insult you, create group chats, post your name or photo, or message your family, employer, contacts, or social media friends.
Unauthorized use of contacts and personal data — the app accesses your phonebook, gallery, SMS, or other data beyond what is necessary for the loan.
Fake legal threats — the collector sends fake subpoenas, fake warrants, fake police blotters, fake barangay summons, or messages claiming you will be arrested for unpaid debt.
Hidden or excessive charges — the loan contract or app screen does not clearly disclose interest, penalties, service fees, deductions, or repayment terms.
Impersonation — scammers use the name, logo, SEC registration number, or screenshots of a legitimate lending company to deceive borrowers.

For SEC purposes, the best complaint is not just “this app is a scam.” It should show the specific acts: unauthorized lending, unfair collection, deceptive fees, misleading registration claims, or abusive debt recovery.

Why the SEC is the main agency for lending app complaints

The Philippine SEC regulates lending companies and financing companies. Under Republic Act No. 9474, or the Lending Company Regulation Act of 2007, lending companies are under SEC supervision, and the SEC may regulate, require reports, examine records, impose fines, and suspend or revoke authority to operate. A person who engages in the business of a lending company without a valid SEC authority may face criminal penalties. (Supreme Court E-Library)

For financing companies, the relevant law is Republic Act No. 8556, or the Financing Company Act of 1998, as amended. Many app-based lenders are either lending companies or financing companies using online lending platforms.

The SEC also enforces Republic Act No. 11765, or the Financial Products and Services Consumer Protection Act of 2022. This law protects financial consumers’ rights to fair treatment, transparent disclosure, protection against fraud and misuse, data privacy, and timely complaint handling. It also gives financial regulators, including the SEC, powers such as market monitoring, enforcement actions, cease-and-desist orders, consumer redress mechanisms, and adjudication of certain money claims. (Supreme Court E-Library)

In 2026, the SEC’s official public channel for complaints is the SEC iMessage system, a web-based ticketing platform for public inquiries, complaints, incidents, and requests. The SEC user guide describes iMessage as the central hub that generates an electronic ticket, allows status tracking, and replaces informal channels like email and Google Forms. (Securities and Exchange Commission)

Legal basis: what laws and rules protect borrowers?

RA 9474: Lending companies must have SEC authority

A lending company cannot simply operate because it has an app, Facebook page, or business permit. Under RA 9474, a lending company is a corporation engaged in granting loans from its own funds or funds sourced from not more than 19 persons, and it is regulated by the SEC. The law authorizes the SEC to supervise lending companies and impose administrative sanctions such as fines, suspension, or revocation of authority. (Supreme Court E-Library)

This matters because many scam apps use names that sound legitimate but are not connected to any authorized lending company.

RA 11765: financial consumer protection

RA 11765 protects borrowers as financial consumers. The law covers credit and digital financial products and services. It recognizes rights to fair treatment, disclosure, protection from fraud and misuse, data privacy, and timely complaint handling. It also states that financial service providers are solidarily liable with accredited third-party service providers for acts or omissions in marketing, transactions, and debt collection. (Supreme Court E-Library)

This is important when a lender says, “Hindi kami ang nang-harass, collection agency lang.” If the collector is acting for the lender, the lender may still be answerable.

SEC rules on unfair debt collection

SEC Memorandum Circular No. 18, Series of 2019 prohibits unfair debt collection practices by financing and lending companies. A 2026 joint advisory by the DICT, NPC, and SEC specifically warned against harassment, intimidation, public shaming, and unlawful use of personal data by online lending platforms. The advisory also states that contacting people in a borrower’s contact list other than named guarantors is prohibited for debt collection purposes.

Collectors may remind you of a valid debt. They may not threaten violence, expose your debt to your contacts, shame you online, or contact random people from your phonebook.

RA 10173: Data Privacy Act of 2012

The Data Privacy Act protects personal information in government and private information systems. It defines personal information, sensitive personal information, processing, consent, and the rights of data subjects. The National Privacy Commission may receive complaints, investigate, issue cease-and-desist orders, and impose bans on processing personal information. (National Privacy Commission)

For online lending apps, privacy issues often involve:

harvesting phone contacts;
messaging people who are not guarantors;
accessing photos, SMS, location, or files unnecessarily;
posting borrower information publicly;
refusing to delete or correct personal data;
using consent screens that are misleading or excessive.

The 2026 advisory also states that unnecessary app permissions are prohibited, that unbridled processing of contact lists is prohibited, and that OLPs may access contacts only for limited legitimate purposes such as selecting character references or guarantors.

RA 10175: Cybercrime Prevention Act of 2012

If the lending app or collector uses computers, phones, social media, or messaging apps to commit fraud, identity theft, forgery, or online libel, RA 10175 may apply. The Cybercrime Prevention Act covers computer-related fraud, computer-related identity theft, and libel committed through a computer system or similar means. (Supreme Court E-Library)

This is why serious cases involving fake identities, hacked accounts, edited photos, extortion, or online posting should also be reported to the NBI Cybercrime Division or PNP Anti-Cybercrime Group, not only to the SEC.

Revised Penal Code and Civil Code remedies

Some lending app conduct may also fall under the Revised Penal Code:

Estafa or swindling under Article 315 — when false pretenses or deceit induce the victim to part with money, such as paying advance fees for a loan that is never released.
Grave threats under Article 282 — when a person threatens harm to the borrower, family, honor, or property.
Light coercions or unjust vexation under Article 287 — for acts that unjustifiably annoy, torment, distress, or disturb another person. The Supreme Court has described unjust vexation broadly as conduct that unjustifiably causes annoyance, irritation, torment, distress, or disturbance. (Supreme Court E-Library)

For civil liability, Civil Code Articles 19, 20, and 21 may support claims for damages where a person exercises a right abusively, violates the law, or willfully causes loss or injury contrary to morals, good customs, or public policy.

Where to file: SEC, NPC, PNP, NBI, or BSP?

Use the agency that matches the main violation. In many lending app cases, you may need to report to more than one agency.

Problem	Main agency	Why
Unregistered lending app, unfair debt collection, excessive charges, hidden fees, false SEC registration claim	SEC	SEC regulates lending and financing companies and their online lending platforms
Contact harvesting, public shaming, unauthorized use of photos, messages to contacts, data misuse	National Privacy Commission	NPC enforces the Data Privacy Act
Death threats, extortion, fake warrants, identity theft, edited photos, hacking, online libel	PNP Anti-Cybercrime Group or NBI Cybercrime Division	These may be cybercrime or criminal offenses
Bank, e-wallet, or BSP-supervised financial institution issue	BSP Consumer Assistance	BSP supervises banks, e-money issuers, and certain financial institutions
Marketplace or general consumer deception not primarily lending-related	DTI	DTI handles many consumer trade complaints

The 2026 DICT-NPC-SEC advisory lists SEC iMessage for unfair debt collection complaints and gives separate cybercrime channels for threats, fraud, and scams, including NBI Cybercrime Division and PNP Anti-Cybercrime Group.

Step-by-step: how to report an online lending app scam to the SEC

1. Identify the app, company, and people involved

Before filing, gather identifying details. The SEC needs to know who the respondent is.

Record:

exact app name;
website URL;
Google Play or Apple App Store link;
app developer name;
package name or app ID, if visible;
company name shown in the app, contract, privacy policy, SMS, or payment page;
SEC registration number and Certificate of Authority number, if claimed;
collector names, phone numbers, email addresses, Viber/WhatsApp/Telegram accounts, or Facebook profiles;
GCash, Maya, bank, or remittance account names and numbers used for payment.

Do not rely only on the app logo. Many scam apps copy names and logos of legitimate companies.

2. Check if the lender or platform is recorded with the SEC

Search the SEC’s public lists for:

lending companies with Certificate of Authority;
financing companies with Certificate of Authority;
recorded online lending platforms.

SEC responses on FOI repeatedly point borrowers to the SEC website lists of registered lending companies, registered financing companies, and recorded online lending platforms. (www.foi.gov.ph)

Also check current SEC advisories. The SEC has published warnings on unrecorded online lending platforms, and a 2026 advisory reminded the public that listed unrecorded OLPs are not authorized to offer, process, or provide loan products through app stores or websites. (Bulacan Government)

Take screenshots of your search results. If the company is not listed, include that in your complaint. If it is listed, still report the abusive act.

3. Prepare a clear chronology

Write a short timeline before submitting. SEC staff should be able to understand the case in a few minutes.

Example:

Date and time	What happened	Evidence
May 3, 2026, 9:14 PM	Downloaded “ABC Cash Loan” from Google Play	Screenshot of app page
May 3, 2026, 9:30 PM	App required access to contacts and gallery before application	Screenshot of permission screen
May 4, 2026, 10:05 AM	Paid ₱1,500 “processing fee” to GCash account before release	GCash receipt
May 4, 2026, 2:00 PM	Loan was not released; agent demanded another ₱2,000	SMS screenshot
May 5, 2026, 7:12 AM	Collector messaged my employer and sister	Screenshots from employer and sister
May 5, 2026, 8:30 PM	Collector threatened to post my photo online	Viber screenshot

This timeline is often more useful than a long emotional narrative because it ties each allegation to proof.

4. File through SEC iMessage

Go to the SEC iMessage portal and open a ticket. The SEC guide states that users can create a ticket, select the appropriate service, upload files if needed, and track ticket status. It also lists “Complaints on Financing and Lending Companies” under the Financing and Lending Companies Department. (Securities and Exchange Commission)

When choosing the service or department, look for the option related to:

Financing and Lending Companies Department;
complaints on financing and lending companies;
illegal or abusive lending activity;
public assistance, if the exact category is unclear.

Use a concise subject line, for example:

Complaint against ABC Cash Loan App for advance-fee scam, unrecorded online lending, and harassment

5. Attach your evidence in organized files

Upload documents in a way that is easy to review. Use filenames that explain what each file contains.

Good filenames:

01-Google-Play-App-Page-ABC-Cash.pdf
02-Loan-Approval-and-Fees.pdf
03-GCash-Payment-Receipt-1500.pdf
04-Harassment-SMS-May5.pdf
05-Messages-to-Contacts.pdf
06-SEC-List-Search-Not-Recorded.pdf
07-Complaint-Narrative.pdf

Avoid sending 80 random screenshots with no labels. If the file is large, combine screenshots into a PDF with page numbers and a short caption under each image.

6. Keep the ticket number and monitor status

Once submitted, keep:

iMessage ticket number;
date and time of submission;
email confirmation, if any;
copies of all attachments;
screenshots of the submitted complaint.

If SEC asks for clarification, reply through the same ticket thread and add only the missing information. Do not create multiple tickets for the same incident unless there is a new, separate violation.

What evidence is required for an SEC complaint?

There is no single “magic” document. SEC complaints are stronger when they contain evidence for four things:

Identity of the app or company
Proof of the loan, offer, or collection activity
Proof of the unlawful or abusive act
Proof of damage, payment, or effect on you or your contacts

Core evidence checklist

Evidence	Why it matters	Practical tip
Government ID of complainant	Shows who is filing and how SEC can contact you	Redact only unnecessary ID numbers if allowed; keep an unredacted copy ready if SEC requests it
App store page screenshot	Identifies the app, developer, and download source	Include URL, date, developer name, and package/app ID if visible
App profile, terms, privacy policy	Shows disclosures, permissions, and claimed company name	Save as PDF or screenshots before the app disappears
Loan agreement or disclosure statement	Shows principal, fees, interest, penalties, due date	Capture all pages, not only the first screen
Payment receipts	Proves money was sent	Include reference number, recipient name, wallet/bank number, date, and amount
SMS/chat/email screenshots	Proves demands, threats, harassment, or false claims	Show sender, date, time, and full message thread
Call logs	Supports repeated or unreasonable contact	Screenshot logs showing number, date, time, and frequency
Messages sent to contacts	Proves public shaming or unauthorized third-party contact	Ask each contact to send screenshots from their own phone
Social media posts or group chats	Proves publication or shaming	Include URL, account name, date/time, and member list if visible
Fake legal documents	Proves misrepresentation or intimidation	Save the file and screenshot the message used to send it
SEC search results	Shows whether the lender or OLP appears registered/recorded	Screenshot the date of search and result page
Medical, employment, or reputational impact proof	Supports harm, urgency, or damages	Use only relevant documents; avoid oversharing sensitive data

Evidence for advance-fee loan scams

For advance-fee scams, focus on proving that the app or agent demanded payment before loan release.

Include:

screenshot of the loan approval promise;
message demanding a fee before release;
payment receipt;
recipient account name and number;
later demand for another fee;
proof the loan was never released;
screenshots of blocked account, deleted chat, or inaccessible app;
any fake SEC certificate, business permit, or “approval letter.”

Advance-fee scams may support an SEC report and, depending on facts, a criminal complaint for estafa under Article 315 of the Revised Penal Code.

Evidence for harassment and public shaming

For unfair debt collection, show the actual collection behavior.

Include:

insulting or threatening messages;
repeated calls at unreasonable times;
messages to people who are not guarantors or co-makers;
group chats created to shame you;
posts showing your name, face, ID, address, employer, or debt;
threats of arrest, barangay blotter, criminal case, or public posting;
fake police, court, or lawyer documents.

If a collector contacted your family, employer, or friends, ask them to send screenshots and a short statement such as:

“I am not a guarantor or co-maker of this loan. I received this message from this number on this date.”

That single sentence helps show that the person contacted had no legal role in the loan.

Evidence for data privacy violations

If the app accessed or misused personal data, include:

screenshots of app permission requests;
privacy policy or consent screen;
proof the app required access to contacts before you could proceed;
messages sent to contacts;
screenshots showing your photo, ID, or personal details were used;
proof you requested deletion, correction, or cessation, if applicable.

For the NPC, a formal complaint must be filed in a specific format, printed and filled out, notarized, and submitted in person, by courier, or by scanned email according to the NPC’s complaint instructions. (National Privacy Commission)

Evidence for cybercrime or threats

For PNP or NBI, preserve original digital evidence as much as possible:

screenshots;
message links;
sender profile links;
phone numbers;
email headers, if available;
transaction receipts;
edited photos or defamatory posts;
threats of death, rape, physical harm, or kidnapping;
fake warrants, subpoenas, or police messages.

Do not secretly record phone calls unless you have proper legal guidance. The Philippines has strict rules on recording private communications under the Anti-Wiretapping Act. Safer evidence usually includes call logs, screenshots, voicemails voluntarily left, and written messages.

How to write the complaint narrative

Use simple, factual language. Avoid exaggeration. The SEC is more likely to act quickly when the complaint is organized.

A good narrative answers these questions:

Who are you?
What app or company are you complaining about?
Did you borrow, apply, pay a fee, or receive collection messages?
What exactly did they do wrong?
When did each act happen?
What evidence is attached?
What action are you asking the SEC to take?

Example wording:

I am filing this complaint against ABC Cash Loan App. On 4 May 2026, the app approved my loan application and required me to pay ₱1,500 as a processing fee before releasing the loan. I paid through GCash to the account shown in Annex C. The loan was not released. The agent then demanded another ₱2,000. When I refused, agents using the numbers shown in Annex D messaged my sister and employer, who were not guarantors or co-makers. The messages included threats to post my photo and accuse me of fraud. I respectfully request the SEC to investigate whether ABC Cash Loan App is authorized to operate as an online lending platform and whether its acts violate SEC rules on lending companies, unfair debt collection, and financial consumer protection.

Practical timelines and what happens after filing

The SEC iMessage system should generate a ticket after submission. Initial review may take days or weeks depending on volume, completeness of evidence, and whether the complaint is routed to the correct department.

Possible outcomes include:

request for additional documents;
referral to the proper SEC department;
verification of the lending company’s registration or Certificate of Authority;
issuance of a notice or order to the company;
administrative investigation;
fines or penalties;
suspension or revocation of authority to operate;
referral to other agencies for privacy or criminal aspects.

Urgent threats should not wait for administrative processing. If someone threatens physical harm, posts your private information, extorts money, or uses fake law enforcement documents, file a cybercrime or police report immediately while your SEC complaint is pending.

Common mistakes that weaken SEC complaints

Filing only a rant without evidence

A complaint saying “scammer po sila” is understandable, but it is hard to investigate without documents. Attach proof.

Naming only the app, not the company

Apps often change names. Look for the company behind the app in the loan agreement, privacy policy, disclosure statement, app store developer profile, SMS footer, or payment account.

Deleting the app too soon

If safe, gather screenshots first:

loan dashboard;
repayment schedule;
fees;
terms and conditions;
privacy permissions;
account profile;
in-app messages.

After evidence is saved, you may remove permissions or uninstall the app for safety.

Sending cropped screenshots

Cropped screenshots may hide sender, date, time, or context. Use full-screen screenshots showing the phone status bar, sender number, date, and message thread.

Ignoring contacts who received messages

Messages sent to contacts are powerful evidence. Ask recipients to send screenshots from their own phones, because that proves the message reached third parties.

Filing only with the SEC when the case is also criminal

The SEC can regulate and sanction lending companies, but it is not a police station or prosecutor’s office. For threats, extortion, identity theft, hacking, or online libel, report to PNP-ACG or NBI as well.

Assuming “SEC registered” means the app is safe

SEC registration of a corporation is not the same as authority to operate as a lending company, and a recorded online lending platform can still violate collection or privacy rules. Always check both the company and the specific app.

Special notes for OFWs and foreigners

OFWs can usually file through SEC iMessage from abroad. Use Philippine time in your timeline, or clearly state the time zone if the messages were received overseas.

Foreigners in the Philippines may also file complaints if they were targeted by a Philippine lending app or a company operating in the Philippines. If you are abroad and SEC, NPC, NBI, or a prosecutor later requires a sworn affidavit, you may need notarization before a Philippine Embassy or Consulate, or an apostille/authentication process depending on where the document is executed and how it will be used.

For foreigners and OFWs, keep:

passport or ID copy;
Philippine phone number used for the app;
foreign phone number, if contacted abroad;
remittance receipts;
screenshots showing country code and time zone;
proof of residence or work abroad only if relevant.

Frequently Asked Questions

How do I report an online lending app to the SEC Philippines?

File through the SEC iMessage portal and choose the service related to complaints on financing and lending companies. Attach your complaint narrative, ID, screenshots, payment receipts, app details, and proof of harassment or scam. Keep the ticket number and monitor replies.

What evidence do I need to report a lending app scam?

At minimum, prepare your ID, app name, company name if known, app store link, loan screenshots, payment receipts, messages from agents, call logs, proof of threats or harassment, and screenshots showing whether the app is or is not listed as a recorded online lending platform.

Can I complain to the SEC if I actually owe money?

Yes. A lender may collect a valid debt, but it must do so lawfully. Owing money does not give collectors the right to threaten you, shame you, contact non-guarantors, misuse your contacts, or use fake legal documents.

Can an online lending app contact my family or employer?

For debt collection, contacting people in your contact list other than named guarantors is prohibited under the 2026 DICT-NPC-SEC advisory. A character reference is not automatically a guarantor. A guarantor must separately consent to be bound to the loan.

What if the app is not SEC registered?

Report it to the SEC and include screenshots showing the app’s name, developer, website, payment account, and your search results. Operating a lending company without valid SEC authority may trigger administrative and criminal consequences under RA 9474.

Should I also file with the National Privacy Commission?

Yes, if the app accessed your contacts, messaged your relatives or employer, posted your personal information, used your photos, or refused to stop processing your data. The NPC handles Data Privacy Act issues, while the SEC handles lending and financing regulation.

Should I pay the loan app just to stop harassment?

Pay only what you can verify as a lawful obligation to the correct legitimate lender. Do not keep sending “processing fees,” “unlocking fees,” or “anti-harassment fees” to unknown accounts. If there are threats or public shaming, preserve evidence and report.

Can I be arrested for not paying an online loan?

Nonpayment of a debt is generally a civil matter. You cannot be arrested simply because you failed to pay a loan. However, separate criminal issues may arise if there is fraud, falsification, or other criminal conduct. Collectors who threaten immediate arrest for ordinary nonpayment are often using intimidation.

What if the collector sends a fake subpoena or warrant?

Save the document and the message that sent it. Do not panic. Verify directly with the court, prosecutor, police station, or barangay named in the document. Fake legal documents may support complaints for unfair collection, fraud, usurpation or misrepresentation, and cybercrime depending on the facts.

How long does an SEC complaint take?

You should receive a ticket after filing through iMessage. The actual review or investigation may take days, weeks, or longer depending on evidence, agency workload, and the complexity of the case. Urgent threats, extortion, or identity theft should be reported immediately to law enforcement while the SEC complaint is pending.

Key Takeaways

Report online lending app scams and harassment to the SEC through the iMessage ticketing system.
The strongest complaints identify the app, company, payment accounts, collectors, dates, messages, and exact violations.
Attach clear evidence: loan screenshots, payment receipts, app store pages, call logs, SMS/chat messages, social media posts, and messages sent to contacts.
SEC handles lending and financing violations; NPC handles data privacy; PNP-ACG and NBI handle cybercrime, threats, extortion, identity theft, and fake legal documents.
Owing a debt does not allow collectors to shame you, threaten you, or contact people who are not guarantors.
Preserve evidence before deleting the app, blocking collectors, or changing phones.