Illegal online lending apps have become one of the most common sources of harassment, privacy violations, and consumer complaints in the Philippines. Borrowers are often approved in minutes—but then chased with threats, “text blasts” to their contacts, and abusive collection tactics that clearly cross legal lines.
This article explains, in Philippine context, what counts as an illegal online lending app, the laws and regulators involved, and how and where to file a complaint, along with practical tips and legal angles you should know.
This is general legal information only and not a substitute for advice from a Philippine lawyer about a specific case.
I. Legal framework for online lending apps
1. Core lending regulation
Republic Act No. 9474 – Lending Company Regulation Act of 2007 (LCRA)
- Requires lending companies to be organized only as corporations and to obtain a Certificate of Authority (CA) from the Securities and Exchange Commission (SEC) before operating. (eLibrary)
- Operating a lending business without SEC authority is a criminal offense, punishable by fine and imprisonment.
Financing companies (RA 8556) are also regulated by the SEC and must have their own CA; many online lending operators are either lending or financing companies under these laws. (Bureau of Small and Medium Enterprises)
BSP Circular No. 1133 (2021) – Sets interest and fee ceilings for lending and financing companies and their online lending platforms (OLPs), especially for small, short-term loans. (Bureau of Small and Medium Enterprises)
2. Consumer protection & conduct rules
RA 11765 – Financial Products and Services Consumer Protection Act (FCPA)
- Strengthens the powers of BSP, SEC, Insurance Commission, and Cooperative Development Authority to protect financial consumers. (AccraLaw)
- Emphasizes the right of financial consumers to be treated fairly, honestly, and professionally at all stages of a transaction. (Cooperative Development Authority)
SEC Memorandum Circular No. 18, Series of 2019 – Prohibition on Unfair Debt Collection Practices
- Applies to financing and lending companies and their third-party service providers.
- Prohibits practices such as threats, use of profane language, contacting borrowers at unreasonable hours, and harassing or humiliating borrowers in public or via their contacts. (Credit Information Corporation)
Data Privacy Act of 2012 (RA 10173) and NPC issuances
Online lending apps that collect and process personal data are “personal information controllers” under the Data Privacy Act. (National Privacy Commission)
The National Privacy Commission (NPC) has:
- Investigated at least 48 online lending apps after receiving over 400 harassment complaints related to data misuse and “shaming.” (National Privacy Commission)
- Ordered the takedown of specific apps for unauthorized use of personal data leading to harassment of borrowers and their contacts. (National Privacy Commission)
- Issued NPC Circular No. 20-01, later amended by NPC Circular 2022-02, specifically targeting loan-related data misuse and aligning with SEC’s unfair collection rules. (National Privacy Commission)
- Explicitly barred online lenders from harvesting borrowers’ phone and social media contact lists for harassment or debt-shaming. (National Privacy Commission)
Other relevant laws
- Truth in Lending Act (RA 3765) – requires disclosure of true cost of credit. (RESPICIO & CO.)
- Consumer Act (RA 7394) – general consumer protection, including unfair or unconscionable sales acts. (RESPICIO & CO.)
- Credit Information System Act (RA 9510) – governs sharing of credit data and powers of the Credit Information Corporation. (Credit Information Corporation)
- Relevant Revised Penal Code offenses (grave threats, unjust vexation, libel) and Cybercrime Prevention Act (RA 10175) can come into play when harassment is severe or online.
II. When is an online lending app “illegal”?
An online lending app may be considered illegal or problematic if it falls into one or more of these categories:
1. Unregistered or unlicensed as a lending/financing company
- The operator is not registered as a corporation and/or has no SEC Certificate of Authority to operate as a lending or financing company.
- SEC has repeatedly ordered online lenders to cease and desist for operating without the required authority under RA 9474. (Credit Information Corporation)
2. Operating despite SEC or NPC orders
- Apps that continue operating even after SEC cease-and-desist orders or NPC takedown orders are clearly in violation. (National Privacy Commission)
3. Engaging in unfair or abusive collection practices
Examples (many explicitly banned under SEC MC 18 and related issuances): (Credit Information Corporation)
- Threatening violence or harm to the borrower or their family.
- Using profanity, insults, or slurs in collection messages.
- Calling or messaging at unreasonable hours.
- Misrepresenting themselves as lawyers, judges, court personnel, police, NBI, or government officials when they are not.
- Harassing or shaming borrowers by messaging their family, neighbors, co-workers, or employers about their debt.
The DOJ itself has highlighted harassment, unreasonable interest rates, and use of abusive tactics as illegal practices that may be investigated and prosecuted. (Department of Finance)
4. Data privacy violations and “contact list harassment”
NPC has documented many complaints where online lenders have: (National Privacy Commission)
- Accessed phone contact lists without valid, specific, and informed consent.
- Sent mass texts to contacts falsely stating that the borrower is a “scammer” or “delinquent,” causing reputational harm.
- Used borrowers’ data for purposes not disclosed at the time of collection.
These acts can constitute violations of the Data Privacy Act, NPC Circular 20-01 (loan-related transactions), and related orders.
5. Interest, fees, and terms that violate regulatory caps or are unconscionable
- BSP Circular 1133 prescribes ceilings on interest and fees for short-term consumer loans by lending/financing companies and their online lending platforms. (Bureau of Small and Medium Enterprises)
- RA 11765 and implementing rules empower regulators to act against unreasonable or grossly disadvantageous terms, even if there is no fixed usury law ceiling. (AccraLaw)
6. Misrepresentation and fraudulent online behavior
- Pretending to be a regulated entity when it is not (e.g., claiming to be SEC/BSP-licensed but not on the official list). (Credit Information Corporation)
- Fake “law office” or “police” chat profiles used for intimidation.
- False threats of imprisonment solely for non-payment of a civil debt (which is unconstitutional in the Philippines except for certain criminal acts).
III. Borrowers’ rights in dealing with online lending apps
From the combined framework of RA 11765, RA 10173, RA 9474, SEC MC 18, NPC circulars, and related rules, borrowers generally have the right to:
Be treated fairly, honestly, and professionally
- This is expressly recognized in RA 11765 and its IRR for financial consumers. (Cooperative Development Authority)
Protection from unfair debt collection practices
- Under SEC MC 18, lenders and their agents may not use threats, obscene language, or harassment; may not publicly shame borrowers; and must respect reasonable hours and channels for communication. (Credit Information Corporation)
Data privacy and control over personal information
- Lenders must obtain valid consent for data collection and cannot use or share data outside the stated purpose.
- The NPC has specifically said online lenders cannot harvest phone and social media contact lists and use them to humiliate borrowers. (National Privacy Commission)
Transparent information on interest, fees, and terms
- RA 3765 and SEC/BSP rules require disclosure of key loan costs; RA 11765 reinforces transparency obligations. (RESPICIO & CO.)
Access to complaint mechanisms and remedies
- RA 11765 mandates regulators to maintain complaint-handling systems; BSP Circular 1169, for example, sets rules on handling complaints against BSP-supervised institutions. (Bureau of Small and Medium Enterprises)
Freedom from imprisonment for mere non-payment of debt
- Non-payment of a purely civil loan (without fraud, bad checks, etc.) is not punishable by jail; harassment based on false threats of automatic imprisonment can be abusive.
IV. Where and how to file a complaint against an illegal online lending app
Most cases involve overlapping violations, so complaints can be made to multiple agencies depending on the issue.
1. Securities and Exchange Commission (SEC)
When to complain to SEC:
- The app/operator is not registered or has no CA as a lending or financing company.
- The company is registered but uses unfair debt collection practices or violates lending rules. (Credit Information Corporation)
How to complain:
Through the SEC’s online ticketing/complaint portal (e.g., iMessage platform for issues and complaints). (imessage.sec.gov.ph)
By attaching:
- Screenshots of the app;
- Evidence of abusive collection (texts, chats, call recordings, etc.);
- Proof that the lender is active (disbursement screenshots, app store links).
SEC has, in the past, ordered many online lending apps to stop operations and remove their apps from app stores for illegal operations and has warned informal lenders that they can face prosecution for RA 9474 violations. (Credit Information Corporation)
2. National Privacy Commission (NPC)
When to complain to NPC:
The lender has:
- Accessed your contact list or social media contacts without proper consent;
- Sent shaming messages to your family, neighbors, co-workers, or others;
- Used your personal data beyond what was disclosed in the privacy notice;
- Shared your loan status widely for the purpose of public humiliation.
NPC has publicly acknowledged hundreds of such complaints and has held hearings, issued summons to dozens of unlisted online lending operators, and ordered the takedown of apps that blatantly misuse personal data. (National Privacy Commission)
How to complain:
- Via email or contact channels such as the NPC complaints email and hotline. (National Privacy Commission)
- Recent guidance notes also mention email submissions and in-person filing for complaints involving online lending harassment. (RESPICIO & CO.)
Include:
- Your narrative (dates, specific apps, amounts);
- Screenshots of terms and conditions and permission requests;
- Copies of harassment messages sent to you and your contacts.
3. Bangko Sentral ng Pilipinas (BSP)
When to complain to BSP:
- The lender is a bank, EMI, or other BSP-supervised institution, or the loan is clearly offered by a BSP-regulated entity.
- Issues involve interest caps, unfair lending practices, or mishandling of complaints under BSP regulations. (Bureau of Small and Medium Enterprises)
BSP has formal complaint-handling rules and mechanisms for financial consumers under its supervision. (Bureau of Small and Medium Enterprises)
4. Other possible forums
Credit Information Corporation (CIC)
- For concerns relating to how loans and payment behavior are reported and used in credit records, CIC provides guidance and may redirect you to the appropriate regulator. (Credit Information Corporation)
Philippine National Police (PNP) / NBI
- When conduct may amount to grave threats, extortion, cyberbullying, or other criminal behavior beyond regulatory violations.
Courts (civil and criminal)
- Borrowers may file civil actions (e.g., damages under the Civil Code or Consumer Act).
- Criminal charges may be considered where harassment involves threats, libel, or other penal violations.
V. What to prepare before filing a complaint
If you’re dealing with an abusive or illegal online lending app, it helps to organize your evidence carefully:
Copies of the loan documents and app screenshots
Screenshots of:
- Loan approval screen;
- Interest and fee disclosure (if any);
- Payment schedules;
- App store listing and developer info.
Harassment evidence
Screenshots of:
- Texts and chat messages (from collectors and from any “fake lawyer/police” profiles);
- Messages sent to your contacts (ask for screenshots from family or colleagues if necessary);
Call recordings (if lawfully obtained), logs of missed calls, and voicemail.
Proof of identity and relationship
- IDs (for regulators to verify your complaint);
- Evidence that certain contacts are not parties to the loan, showing misuse of their data.
Timeline of events
- Date loan was taken;
- When first harassment message was received;
- Any payments made;
- When you revoked permissions or uninstalled the app (if applicable).
List of agencies you’ve contacted
- If you have already filed complaints with NPC, SEC, BSP, etc., keeping a record of reference numbers helps you track progress. FOI records show that complainants commonly pursue several parallel complaints for online lending harassment. (FOI Philippines)
VI. What remedies or outcomes are possible?
Depending on which laws and agencies are involved, possible outcomes include:
Regulatory enforcement actions
- Cease-and-desist orders against the app/operator;
- Takedown of the app from app stores (as NPC has already done in some cases); (National Privacy Commission)
- Fines, suspension, or revocation of SEC Certificate of Authority.
Criminal liability
- For unlicensed lending, RA 9474 provides penalties of fines and imprisonment. (eLibrary)
- For data privacy violations, RA 10173 includes criminal penalties for unauthorized processing, improper disposal, and similar acts. (National Privacy Commission)
- Threats, libel, unjust vexation, or extortion may also be prosecuted under the Revised Penal Code and cybercrime law.
Civil damages
- Borrowers and affected contacts may sue for moral and exemplary damages due to reputational harm, anxiety, and humiliation caused by abusive collection and data misuse.
Reform of practices
- Even if a particular complaint does not lead to prosecution, regulators may issue new guidelines or strengthen existing rules, as seen with NPC Circulars on loan-related transactions and SEC’s MC 18. (National Privacy Commission)
VII. Practical tips for borrowers dealing with abusive OLAs
Don’t ignore legitimate debt—but know your rights.
- The principal loan generally still needs to be paid, but unconscionable interest and illegal fees can be questioned.
- Harassment is not a lawful collection method.
Limit app permissions.
- Avoid granting access to contacts, photos, or unnecessary data. If already granted, consider revoking permissions in your phone settings—though this won’t erase data already harvested.
Document, don’t argue.
- Instead of engaging in heated back-and-forth, keep copies of all messages and threats for your complaint files.
Inform affected contacts.
- If the lender has already messaged your friends or co-workers, calmly explain that this relates to an abusive lender and that you are taking legal/regulatory steps.
Seek legal help if harassment escalates.
A lawyer can help you:
- Draft a strong complaint to SEC/NPC/BSP;
- Assess whether criminal charges are appropriate;
- Negotiate or restructure debts where possible.
VIII. Evolving landscape: proposed reforms and future trends
Policymakers have recognized that RA 9474, written before the full rise of mobile apps and fintech, needs updating. Draft measures in Congress aim to modernize regulation of online lending platforms, including:
- Clearer definition and governance of online lending platforms;
- Higher minimum capitalization for digital lenders;
- Explicit prohibitions on accessing borrowers’ phone contact lists and contacting third parties for shaming and harassment. (Congress Documentation)
These proposals build on existing enforcement by SEC and NPC and the newer RA 11765 framework, signaling a continued push to clamp down on predatory online lending practices.
IX. Final notes
Illegal online lending app complaints in the Philippines typically sit at the intersection of:
- Unregistered or improperly licensed lending activity (SEC/BSP jurisdiction);
- Abusive collection behavior (SEC MC 18, RA 11765, DOJ oversight);
- Data privacy violations and digital harassment (NPC and, in extreme cases, criminal law).
Understanding which laws are in play and which agency handles what makes it easier to:
- Preserve the right kind of evidence;
- File complaints in the right places; and
- Push back against harassment while still dealing responsibly with any legitimate debt.
Anyone targeted by an abusive online lending app is not powerless—Philippine law now has a fairly robust set of tools to regulate these actors and protect borrowers, especially when complaints are well-documented and filed with the appropriate regulators.