The digital shift in the Philippine financial landscape has birthed a convenient but occasionally predatory creature: the Online Lending App (OLA). While legitimate fintech firms provide essential credit access, a surge of unlicensed entities has led to widespread reports of harassment, debt-shaming, and data privacy violations.
For those caught in the web of an abusive OLA, the Securities and Exchange Commission (SEC) is the primary regulatory shield. Navigating the legalities of reporting these entities requires an understanding of both corporate registration and fair debt collection standards.
1. Determining Legality: Registration vs. Authority
The most common deception used by predatory OLAs is claiming they are "SEC Registered." In the Philippines, corporate registration is not a license to lend. A legitimate OLA must possess two distinct certifications:
- Certificate of Registration (CR): This simply means the company is a registered corporation.
- Certificate of Authority (CA): This is the specific license required to operate as a lending or financing company.
If an OLA has a CR but no CA, it is operating illegally. Under the Lending Company Regulation Act of 2007 (RA 9474) and the Financing Company Act of 1998 (RA 8556), any entity engaged in the business of lending without a CA faces criminal prosecution and administrative fines.
How to Verify
Before filing a complaint, check the SEC’s official list of Lending and Financing Companies with a CA, as well as the list of revoked or suspended certificates, available on the SEC website.
2. Defining "Harassment" Under SEC Rules
Even if an OLA is licensed, it is strictly prohibited from employing "Unfair Debt Collection Practices." SEC Memorandum Circular No. 18, Series of 2019 explicitly forbids the following:
- Threats of Violence: Any threat to the physical safety or reputation of the borrower or their family.
- Profanity: The use of obscene or insulting language to shame the borrower.
- Disclosure of Information: Contacting people in the borrower’s contact list without express consent, or posting the borrower's debt on social media (debt-shaming).
- False Representation: Claiming to be lawyers, court officials, or government agents to intimidate the borrower.
- Late-Night Contact: Contacting the borrower between 10:00 PM and 6:00 AM, unless the borrower gave prior consent.
3. The Evidence Trail: Building Your Case
The SEC requires substantial proof to act against an OLA. A "he-said-she-said" scenario rarely results in a cease-and-desist order. You must compile a Complaint Document Folder containing:
| Evidence Type | Description |
|---|---|
| Screenshots | Harassing text messages, Viber chats, or Facebook posts/comments. |
| Call Logs/Recordings | Records of the frequency and timing of calls, or recordings of abusive conversations. |
| Loan Contract | The digital copy of the terms, showing the interest rates and hidden fees. |
| Proof of Payment | Transaction receipts or screenshots of payments made via e-wallets or over-the-counter. |
| Contact List Breach | Proof that the OLA contacted your relatives or colleagues who are not co-makers. |
4. The Step-by-Step Reporting Process
The SEC handles complaints through the Corporate Governance and Finance Department (CGFD).
Step 1: Initial Informal Report
You can send an email to cgfd_enforcement@sec.gov.ph or use the SEC i-Message portal. Provide the name of the OLA and a brief summary of the violation.
Step 2: Filing a Formal Complaint
For the SEC to issue a formal penalty or revoke a license, a Formal Verified Complaint is often necessary.
- Draft a Complaint-Affidavit: State the facts of the case clearly.
- Verification: The document must be notarized.
- Submission: Submit the notarized complaint along with your evidence to the SEC Secretariat at the SEC Headquarters or via their designated online submission channels.
Step 3: Referral to the Enforcement and Investor Protection Department (EIPD)
If the OLA is entirely unlicensed, the CGFD will refer the case to the EIPD, which handles the criminal aspect of unauthorized lending.
5. Overlapping Jurisdictions: NPC and PNP-ACG
While the SEC regulates the business of lending, harassment often involves other crimes.
- National Privacy Commission (NPC): If the OLA accessed your phone’s contacts, photos, or social media without valid consent, file a complaint for violation of the Data Privacy Act of 2012.
- PNP Anti-Cybercrime Group (PNP-ACG): For cases involving grave threats, identity theft, or online libel under the Cybercrime Prevention Act of 2012, report the incident to the nearest PNP-ACG district office.
6. Summary of Legal Protections
Pro Tip: Never pay "processing fees" to settle a complaint. The SEC does not charge borrowers for the investigation of predatory apps.
The SEC has the power to issue Cease and Desist Orders (CDO) and permanently revoke the registration of companies proven to be violating the law. Since 2019, the Commission has cancelled the licenses of dozens of lending companies and ordered the removal of hundreds of apps from the Google Play Store and Apple App Store.
Silence only emboldens predatory lenders. Utilizing the SEC’s regulatory framework is the most effective way to protect your rights and stop the cycle of digital harassment.