1) Why “online lending apps” are regulated differently

In the Philippines, what people call “online lending apps” can fall under different legal regimes depending on who is actually extending credit and what license they hold:

SEC-registered Lending Companies and Financing Companies These are typically the entities behind many stand-alone lending apps (especially short-term cash loan apps). They are regulated primarily by the Securities and Exchange Commission (SEC) under:
- Republic Act No. 9474 (Lending Company Regulation Act of 2007) and its implementing rules
- Financing Company Act (and SEC rules for financing companies)
- SEC circulars specific to online lending platforms (OLPs)
BSP-supervised financial institutions (banks, non-bank financial institutions under BSP supervision, credit card issuers, some e-money issuers, etc.) If the lender is a BSP-supervised institution, interest/charges and disclosures are governed mainly by Bangko Sentral ng Pilipinas (BSP) rules plus general consumer and civil law.
Cooperatives and other special lenders (cooperative credit, pawnshops, etc.) These have their own regulators and rules, but still intersect with general laws on disclosure, unfair practices, debt collection, privacy, and criminal statutes.

Because of that, the “maximum allowed” interest and charges can mean different things: a statutory cap, a regulatory cap (SEC or BSP), or—where no active cap applies—limits derived from courts striking down unconscionable interest and enforcing disclosure requirements.

2) The baseline legal framework on interest in the Philippines

A. The Usury Law and why “there is no single universal cap”

Historically, the Philippines had statutory ceilings under the Usury Law. Over time, interest rate ceilings were effectively liberalized (commonly traced to central bank issuances removing fixed ceilings for many loans). In practice today:

Many loans do not have a single, across-the-board statutory maximum interest rate.
However, courts can invalidate or reduce interest that is unconscionable, iniquitous, or shocking, even if the borrower signed the contract.
Specific regulators (notably the SEC for lending/financing companies and the BSP for certain products) may impose product- or sector-specific caps.

So, legality is often a combination of: (i) what the regulator allows for that lender type, (ii) what the contract discloses, and (iii) what courts will tolerate as non-unconscionable.

B. The Civil Code rules still matter

Even when a regulator does not impose a numeric cap, the Civil Code and jurisprudence concepts remain central:

Interest should be stipulated in writing (as a contractual matter).
Charges must not violate law, morals, good customs, public order, or public policy.
Courts can reduce penalty clauses and excessive interest/charges when they function as punitive or oppressive terms.

C. “Interest” versus “charges”

For online lending apps, the real cost is frequently embedded in:

Nominal interest
Service fees / processing fees
Add-on fees (documentary, convenience, “membership,” “verification,” “insurance” tied to the loan, etc.)
Penalty interest / late fees
Collection charges Regulators and courts increasingly look at the total cost of credit, not just the label “interest.”

3) The key rule set for most stand-alone online lending apps: SEC regulation

A. Who must register and what the SEC expects

If an app is operated by (or for) a lending company or financing company, that entity must be:

Registered with the SEC as a lending or financing company
Compliant with SEC rules specific to Online Lending Platforms (OLPs)

SEC regulation focuses on:

Licensing/registration validity and proper disclosures
Responsible lending conduct
Prohibited unfair collection practices
Advertising and transparency of pricing
Imposition of interest and fees within permitted bounds (including caps where applicable)

Operating an online lending app without the proper SEC registration (or representing that it is authorized when it is not) triggers serious regulatory and possible criminal exposure.

B. Rate ceilings and charge ceilings (SEC)

For SEC-regulated lending/financing companies operating online, the SEC has imposed ceilings on pricing for certain loan types/products commonly offered by OLPs.

A widely cited SEC policy (implemented via SEC issuance) set ceilings for interest and other charges typically applicable to short-term, small-amount online loans. In general form, the SEC approach is:

A maximum interest rate (often expressed monthly and/or daily)
A maximum “total cost” cap that includes interest plus allowable fees/charges
Limits on penalties (late payment charges/penalty interest)
Limits on collection fees and other add-ons

Practical takeaway: even if the contract calls something a “service fee,” regulators may treat it as part of total cost and test it against the applicable ceiling.

Important legal nuance: the enforceable ceiling depends on (1) the lender’s status (SEC-regulated or BSP-regulated), (2) the product/tenor covered by the specific SEC issuance, and (3) whether later issuances have revised the caps. The SEC’s framework is “cap-based” for covered products rather than a single universal number for all credit.

C. What counts toward the cap (how regulators usually compute it)

When a “total cost of credit” cap applies, regulators typically include:

Stated interest
Processing/service fees
Deductions from proceeds that function as prepaid finance charges
Mandatory ancillary charges tied to loan approval/release

They usually exclude only those amounts that are truly optional and not a condition for getting the loan, but labeling something “optional” will not help if the borrower cannot realistically obtain the loan without paying it.

4) BSP context: if the “online lending app” is tied to a bank or BSP-supervised lender

If the lender is a bank, credit card issuer, or a BSP-supervised non-bank, pricing and practices are typically governed by:

BSP consumer protection and disclosure frameworks
Product-specific BSP rules (for example, credit card pricing has historically been subject to BSP-set constraints)
General civil law on unconscionable interest and penalties

Even where BSP rules do not fix one universal numeric cap for all loan products, BSP supervision brings:

Stricter standards for truthful disclosure
Controls on fees and penalties
Examination/supervisory enforcement

5) Mandatory disclosure laws that directly affect “allowed charges”

A. Truth in Lending Act (Republic Act No. 3765)

RA 3765 requires lenders to disclose clearly (in a form and manner required by implementing rules) the true cost of credit, typically including:

Finance charge
Effective interest rate
Amount financed
Payment schedule and total payments

For online lending apps, RA 3765 is crucial because many disputes arise from:

Upfront deductions from proceeds that were not adequately explained
Misleading “low daily interest” marketing that masks high effective rates
Unclear penalty computations

Failure to properly disclose can lead to:

Administrative action (by regulator, where applicable)
Contract enforcement problems
Liability under consumer protection and unfair practice theories

B. Consumer Act and unfair/deceptive practices

Even if a lender argues that a particular fee is “allowed,” advertising and collection behavior must still avoid:

Deceptive, misleading, or false representations
Hidden charges not reasonably disclosed before consummation
Bait-and-switch pricing

6) Penalties, late fees, and collection charges: the most litigated add-ons

A. Penalty interest / late charges

Even when interest is stipulated, penalty charges can be cut down if they are:

Excessive in relation to the principal obligation
Functionally punitive rather than compensatory
Stacked in a way that causes runaway balances

Courts commonly reduce:

High penalty interest layered on top of already high interest
Compounded penalty schemes that produce extreme effective costs

B. Collection practices are regulated separately from pricing

Regardless of the nominal “rates,” online lending apps in the Philippines have drawn enforcement for abusive collection behavior. Commonly prohibited (or legally risky) conduct includes:

Threats of violence or criminal prosecution used as leverage (when not legally grounded)
Harassment, shaming, or contacting third parties in a way that violates privacy or defamation laws
Publishing borrower information
Using phone access permissions to message a borrower’s contacts to shame them

Even if the principal and interest are contractually valid, abusive collection may trigger:

SEC sanctions (for SEC-regulated entities)
NPC/Data Privacy liability (see below)
Criminal exposure (grave threats, unjust vexation, etc., depending on facts)
Civil suits for damages

7) Data Privacy Act: a major constraint on how apps impose and collect charges

Many online lending apps rely on device permissions (contacts, photos, SMS) and aggressive follow-ups. The Data Privacy Act of 2012 (RA 10173) and National Privacy Commission (NPC) rules are central because:

Borrower data must be collected and processed on a lawful basis, with transparency and proportionality.
Using contacts to pressure payment, or accessing data beyond what is necessary for credit evaluation, can be unlawful.
Improper disclosure of delinquency information to third parties can violate privacy and lead to regulatory penalties and damages.

This matters to “charges” because some apps attempt to add “collection fees” linked to collection tactics that are themselves unlawful.

8) Criminal and regulatory consequences for illegal rates/charges and misconduct

A. SEC enforcement (for lending/financing companies and OLPs)

Potential consequences include:

Suspension or revocation of SEC registration/license
Cease and desist orders
Monetary penalties
Orders to refund/adjust charges
Blacklisting of apps or public advisories

B. Possible criminal angles (fact-specific)

Depending on conduct:

Estafa-type theories may arise in deceptive schemes (rare but possible in extreme fraud patterns)
Threats/harassment or defamatory conduct in collection
Data Privacy Act violations
Cybercrime-related offenses if electronic means are used in prohibited ways

9) What borrowers can challenge (and what lenders must be careful about)

A. Borrower challenge points

Borrowers commonly challenge:

Lack of proper disclosure (true cost not shown clearly before agreeing)
Unconscionable interest (effective rates far beyond reasonable commercial standards)
Disguised interest through “fees” deducted upfront
Excessive penalties (late fee stacking)
Abusive collection (harassment, threats, shaming, third-party contact)
Privacy violations (contacts accessed/messaged; data published)

Even if the loan is valid, any of the above can result in reduction of amounts, damages, or regulatory sanctions.

B. Lender compliance checklist (Philippine context)

For an online lending app to stay on the safe side:

Correct regulator: confirm if SEC-regulated lending/financing company or BSP-supervised institution.
License integrity: valid SEC authority; correct name, corporate details, and app branding alignment.
Pricing discipline: comply with any SEC-imposed ceilings applicable to the product; ensure “fees” do not push total cost beyond caps.
Truth in Lending: disclose finance charge and effective rate clearly, prominently, and before consummation.
Plain language: show sample computations; avoid “teaser” daily rates that hide the effective monthly/annual cost.
Penalty restraint: keep penalty clauses proportionate; avoid compounding schemes that explode balances.
Collection governance: written policies prohibiting harassment, third-party shaming, threats, and misrepresentation.
Privacy compliance: collect only necessary data; justify permissions; maintain a lawful basis; avoid contact-list shaming.

10) Practical way to understand “maximum allowed” for a specific app

To determine the actual maximum interest and charges applicable to a particular online lending app, identify:

Who is the lender of record (the registered entity actually extending credit).
What license/regulator applies (SEC lending company/financing company vs BSP-supervised vs cooperative, etc.).
What product is being offered (short-term cash loan vs installment vs credit line; tenor and amount).
How the app collects money (upfront deductions, “service fees,” add-ons, late fees).
What the total cost of credit is (not just the nominal interest rate).

If the lender is an SEC-registered lending/financing company operating an online lending platform, SEC caps on interest/fees for covered products are often the controlling “maximum.” If the lender is BSP-supervised, BSP rules and product-specific constraints plus general civil law against unconscionability become central.

11) Key Philippine legal instruments commonly implicated

RA 9474 (Lending Company Regulation Act of 2007)
Financing Company Act and SEC rules for financing companies
SEC rules/circulars on Online Lending Platforms (OLPs) and pricing/fee ceilings for covered products
RA 3765 (Truth in Lending Act)
Civil Code provisions on obligations, interest stipulations, and penalty clauses (plus jurisprudence on unconscionable interest)
RA 10173 (Data Privacy Act of 2012) and NPC issuances
General criminal laws potentially implicated by abusive collection conduct (fact-dependent)

12) Bottom line

In Philippine practice, the “maximum interest rates and charges” for online lending apps are determined by (a) the lender’s regulatory category (SEC vs BSP vs others), (b) any active SEC/BSP ceilings applicable to the product, (c) mandatory Truth in Lending disclosures and the real “total cost of credit,” and (d) the long-standing principle that unconscionable interest and oppressive penalties can be reduced or struck down even if contractually agreed—especially when paired with deceptive disclosures or abusive collection.