How to Report Unlicensed Online Lending Apps for Harassment to the SEC

The proliferation of mobile-based lending platforms has led to a surge in predatory practices and "debt-shaming" tactics. In the Philippine jurisdiction, the Securities and Exchange Commission (SEC) is the primary regulatory body tasked with overseeing lending and financing companies. Reporting these entities involves navigating specific administrative and criminal frameworks designed to protect financial consumers.


I. Legal Framework and Borrower Rights

Borrowers are protected by several key pieces of legislation and administrative orders:

  • Republic Act No. 11765 (Financial Products and Services Consumer Protection Act): Enacted to ensure that financial service providers treat consumers fairly and prohibits "unfair, unconscionable, and deceptive" collection practices.
  • SEC Memorandum Circular No. 18, Series of 2019: Explicitly prohibits unfair debt collection practices, such as the use of insults, profane language, and unauthorized contact of third parties.
  • Lending Company Regulation Act of 2007 (RA 9474): Requires all lending entities to be incorporated and obtain a Certificate of Authority (CA) from the SEC.
  • Fair Debt Collection Practices Act (Proposed/Senate Bill 1744): As of March 2026, new legislative efforts have further tightened definitions of harassment, specifically targeting "contact list harvesting" and automated harassment bots.

II. Defining Prohibited Harassment Practices

Under SEC rules, the following actions constitute "Unfair Collection Practices" and are grounds for administrative sanctions, including the revocation of a lender's license:

  1. Debt Shaming: Publicly posting a borrower’s name or photo on social media or in public groups to "shame" them into payment.
  2. Contact List Harvesting: Contacting individuals in the borrower’s phone contacts who are not listed as co-makers or guarantors.
  3. Threats of Violence: Threatening physical harm to the borrower, their family, or their property.
  4. Misrepresentation: Falsely claiming to be a lawyer, a court official, or a police officer, or sending fake "warrants of arrest" or "subpoenas."
  5. Unreasonable Contact Hours: Calling or texting before 6:00 AM or after 10:00 PM, unless the debt is more than 15 days past due and the borrower has provided express consent for such timing.

III. Step-by-Step SEC Reporting Procedure

1. Verify the License Status

Before filing, determine if the OLA is legitimate. The SEC maintains a list of "Lending Companies and Financing Companies with Certificates of Authority" on its official website. If an app is not on this list, it is operating illegally, which simplifies the SEC's enforcement action for a "Cease and Desist" order.

2. Secure Evidence (The "Evidence Kit")

The SEC requires specific documentation to act. You must preserve:

  • Screenshots: Capture all threatening SMS, in-app messages, and social media posts. Ensure the sender's number or account name is visible.
  • Call Logs: Document the frequency and timing of calls.
  • Loan Contract: A copy of the electronic disclosure statement showing the interest rates and fees.
  • Third-Party Statements: If your friends or colleagues were contacted, ask them for screenshots of the messages they received.

3. Submit the Complaint

Complaints can be filed through the following channels:

  • SEC i-Message Portal: Use the online ticketing system at imessage.sec.gov.ph.
  • Corporate Governance and Finance Department (CGFD): Direct formal emails to cgfd_enforcement@sec.gov.ph.
  • Physical Filing: Visit the SEC Headquarters (7907 Makati Avenue, Makati City) or a Regional Extension Office.

Note: Your complaint should include your full name, contact details, the name of the lending app, the parent company (if known), and a chronological narration of the harassment.


IV. Parallel Remedies: NPC and PNP-ACG

Harassment often involves more than just regulatory violations; it frequently crosses into data privacy breaches and criminal cybercrime.

Agency Jurisdiction Focus Area
National Privacy Commission (NPC) Data Privacy Act (RA 10173) Unauthorized access to contact lists; doxing; misuse of personal data.
PNP Anti-Cybercrime Group (ACG) Cybercrime Prevention Act (RA 10175) Cyberlibel; grave threats; online extortion; "morphed" photo harassment.
PAOCC Anti-Organized Crime Large-scale illegal OLA "hubs" operating without any legal personality.

V. Recent 2026 Regulatory Updates

In early 2026, the SEC moved to lift the moratorium on new online lending platforms but introduced Prudential and Market Conduct Standards. These include:

  • Mandatory Capitalization: Higher paid-up capital for OLAs to ensure only stable entities operate.
  • Anti-Scraping Rules: Technology-based prohibitions against apps accessing a user’s contact list or gallery as a condition for a loan.
  • Adjudicatory Power: Under RA 11765, the SEC now has the power to order the restitution of funds or the condonation of debt in cases of extreme harassment.

VI. Summary of Actions

If you are being harassed, immediately stop communicating with the collectors. Engaging often escalates the abuse. Secure your social media privacy settings, inform your primary contacts that your data may have been breached, and proceed with filing the administrative complaint to the SEC to initiate the process of revoking the lender's authority to operate.

Would you like me to draft a formal complaint letter addressed to the SEC Enforcement Department using the details of your specific situation?

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.