If an online lending app told you that your loan was “approved” but you first had to pay a deposit, activation fee, verification fee, insurance fee, tax, account correction fee, or release fee, treat it as a serious red flag. In many Philippine online lending app scams, there is no real loan at all: the scammer only uses the promise of a fast loan to collect repeated payments from you. This guide explains what the deposit means legally, whether you still owe anything if no loan was released, what evidence to save, and where to report the scam in the Philippines.

What an Online Lending App Deposit Scam Usually Looks Like

The common pattern is simple:

You see a loan app, website, Facebook post, TikTok ad, Telegram group, or text message offering fast approval.
You fill out a form and upload personal details, sometimes including your ID, selfie, contacts, or bank/e-wallet account.
The app says your loan is approved.
Before release, they ask you to pay a “deposit” or “fee.”
After you pay, they invent another problem:
- your bank account number was “wrong”
- your loan is “frozen”
- you need to pay tax
- you must pay insurance
- you must increase your “credit score”
- you must pay a “manager fee”
- you must send another payment before refund
When you refuse, they may threaten to sue you, report you, shame you online, or contact your family and friends.

This is often called an advance-fee loan scam. The scammer asks for money first, but the promised loan is never released.

A legitimate lender may charge disclosed processing fees, service charges, interest, and penalties, but those charges must be properly disclosed and tied to a real loan transaction. A demand to send money to a personal GCash, Maya, bank account, crypto wallet, or unnamed “agent” before any loan is released is very different.

Do You Still Owe the Loan If No Money Was Released?

Usually, no real loan obligation arises if the lender never released the loan proceeds to you.

A loan is not just an app screen saying “approved.” In practical terms, there must be a real agreement and actual release of money or credit. If you never received the loan proceeds, the scammer cannot truthfully claim that you must repay the full loan amount.

Be careful, however, with documents you signed or clicked. Some apps insert terms saying that fees are non-refundable or that a loan was “processed.” Those terms may still be challenged if they were misleading, fraudulent, undisclosed, or imposed by an unauthorized lender.

If the only money that changed hands was your “deposit,” the usual issue is not repayment of a loan. The issue is recovery of the amount you paid and possible criminal, regulatory, and data privacy violations.

Why Asking for a Deposit Before Loan Release Is a Red Flag

A deposit demand is suspicious when:

the lender is not listed with the Securities and Exchange Commission;
the online lending platform is not in the SEC list of recorded online lending platforms;
the payment account is under an individual’s name;
the app refuses to issue an official receipt;
the app does not provide a proper disclosure statement;
the lender keeps asking for additional payments after each payment;
the supposed loan is “frozen” until you pay more;
the lender threatens you even though no loan was released;
the app uses fake SEC, BIR, BSP, or court documents;
the app asks for OTPs, passwords, remote access, or your full e-wallet login.

Under the Lending Company Regulation Act of 2007, Republic Act No. 9474, lending companies are regulated by the SEC. The implementing rules require a lending company to be organized as a stock corporation and to secure a Certificate of Authority from the SEC before engaging in the business of lending.

For online platforms, it is not enough that a company name appears somewhere online. The public should check the SEC’s official lists, including the SEC List of Recorded Online Lending Platforms.

Philippine Laws That May Apply

1. Estafa Under the Revised Penal Code

If a person deceived you into paying a deposit by falsely promising a loan, the facts may fall under estafa, a form of fraud under Article 315 of the Revised Penal Code.

For many online lending deposit scams, the most relevant concept is estafa by false pretenses or fraudulent acts. This usually involves:

a false representation made before or at the time you paid;
your reliance on that representation;
payment or delivery of money because of the deception; and
damage or loss suffered by you.

Examples:

“Your ₱50,000 loan is approved. Pay ₱3,000 insurance first.”
“Your account has an error. Pay ₱5,000 to unfreeze the loan.”
“This is required by the SEC/BIR before release,” when that is false.
“Pay one last fee and we will release or refund everything,” but they keep demanding more.

2. Cybercrime Law if the Scam Was Done Online

The Cybercrime Prevention Act of 2012, Republic Act No. 10175, may apply when fraud is committed through a computer system, mobile app, website, messaging platform, or other information and communications technology.

Depending on the facts, investigators may consider:

computer-related fraud;
online estafa;
identity-related issues;
threats or harassment through electronic means;
use of fake online accounts or deceptive digital platforms.

In practice, victims often report these cases to the PNP Anti-Cybercrime Group or the NBI Cybercrime Division, especially when the scam happened through an app, website, Facebook page, Telegram, Viber, WhatsApp, SMS, or e-wallet transaction.

3. Lending Company Regulation and SEC Rules

The SEC regulates lending and financing companies.

Under the Implementing Rules of RA 9474, a lending company must have SEC authority to operate. The rules also require disclosure of charges such as interest, service or processing fees, penalties, collection fees, notarial fees, and other fees connected with the loan transaction.

The Truth in Lending Act, Republic Act No. 3765, requires disclosure of finance charges in credit transactions so borrowers understand the true cost of credit.

The Financial Products and Services Consumer Protection Act, Republic Act No. 11765, also strengthened consumer protection for financial products and services. It gives financial regulators, including the SEC for entities under its jurisdiction, authority to address unfair, fraudulent, or abusive financial practices.

4. Data Privacy Law if the App Accessed Your Contacts or Threatened to Shame You

Many online lending app victims suffer a second harm after paying: the app accesses their phone contacts, photos, employer details, or social media and then threatens public shaming.

The Data Privacy Act of 2012, Republic Act No. 10173, requires personal data processing to follow the principles of transparency, legitimate purpose, and proportionality.

The National Privacy Commission’s NPC Circular No. 20-01 on loan-related transactions, as amended by NPC Circular No. 2022-02, specifically addresses the processing of personal data in loan transactions.

The 2026 joint DICT-NPC-SEC Public Advisory on Online Lending Platforms states that online lending platforms are prohibited from unnecessary, unauthorized, excessive, or disproportionate processing of personal data, including excessive access to borrowers’ contact lists. It also states that contacting people in the borrower’s contact list other than guarantors is prohibited.

This matters because a person listed as a “character reference” is not automatically a guarantor. A guarantor is someone who separately and clearly consented to be responsible for the loan if the borrower defaults.

5. Civil Code Remedies for Refund

Even if a criminal case is difficult because the scammer used fake identities, there may still be civil concepts supporting a refund claim.

Relevant Civil Code principles include:

Article 22: no person shall be unjustly enriched at the expense of another.
Article 19: every person must act with justice, give everyone his due, and observe honesty and good faith.
Article 20: a person who willfully or negligently causes damage contrary to law must indemnify the injured person.
Article 21: a person who willfully causes loss or injury in a manner contrary to morals, good customs, or public policy must compensate the injured party.
Article 2154: if something is received when there is no right to demand it, and it was unduly delivered through mistake, the obligation to return it arises.

These provisions are useful when the scammer’s identity is known and reachable. If the scammer is anonymous, law enforcement and payment-channel reports usually come first.

What To Do Immediately After Paying a Deposit

1. Stop Paying Additional Fees

Do not send another payment just because they say:

“last payment na po”;
“refundable naman”;
“system requirement”;
“BIR tax”;
“SEC clearance”;
“anti-money laundering verification”;
“your loan is frozen”;
“pay again or we will sue you.”

In many scam cases, every new payment only creates another demand.

2. Do Not Share OTPs, Passwords, or Remote Access

Never give:

OTPs;
e-wallet PINs;
online banking passwords;
card CVV;
SIM registration screenshots;
remote access through AnyDesk, TeamViewer, or similar apps;
video selfies holding your ID unless you are sure the lender is legitimate.

If you already shared these, change passwords immediately and contact your bank or e-wallet provider.

3. Preserve Evidence Before Blocking Them

Before deleting the app or blocking the account, save evidence.

Take screenshots and screen recordings showing:

app name and logo;
website URL or app store page;
account profile of the lender or agent;
all chats and SMS;
phone numbers used;
payment instructions;
GCash/Maya/bank account name and number;
transaction receipts;
fake loan approval notice;
threats or harassment;
names of persons who contacted you;
dates and times of all payments;
permissions requested by the app;
contacts or people they messaged.

Do not edit the screenshots except to organize copies. Keep the original files on your phone or cloud storage because metadata may help later.

4. Revoke App Permissions and Secure Your Phone

After saving evidence:

Revoke the app’s access to contacts, camera, photos, microphone, SMS, and location.
Uninstall the app if it is suspicious.
Change passwords for your email, e-wallets, bank apps, and social media.
Turn on two-factor authentication.
Warn your contacts not to respond to messages about you.
Report fake accounts pretending to be you.
If you sent IDs, monitor for identity theft and unauthorized accounts.

If the app accessed your contacts, prepare for possible harassment. Send a calm message to close family or references: “Please ignore any loan-related messages about me. I am reporting a suspected online lending scam.”

Evidence Checklist

Evidence	Why It Matters
Screenshots of loan approval	Shows the promise that induced payment
Deposit receipt or e-wallet transaction	Proves the amount, date, and recipient
Account name and number	Helps trace payment channels
Chat logs and SMS	Shows false promises, threats, and repeated demands
App name, package name, website, or URL	Helps SEC, PNP, NBI, or NPC identify the platform
IDs or selfies you submitted	Relevant for identity theft and data privacy complaints
Contact harassment screenshots	Supports NPC and SEC complaints
Call logs and recordings, if lawfully obtained	Helps show pressure, threats, or collection tactics
Names of affected contacts	Supports claims of unauthorized contact-list use
Timeline of events	Makes your complaint easier to understand

Where To Report an Online Lending App Deposit Scam in the Philippines

Different agencies handle different parts of the problem. A deposit scam may require more than one report.

Problem	Where to Report	What to Prepare
Unauthorized or abusive lending platform	SEC iMessage Portal / SEC Financing and Lending Companies Department	App name, company name, screenshots, loan terms, payment proof
Online fraud, estafa, threats, fake accounts	PNP Anti-Cybercrime Group or NBI Cybercrime Division	Complaint affidavit, screenshots, receipts, links, phone numbers
Data privacy violations, contact shaming, unauthorized access to contacts	National Privacy Commission complaint process	Notarized complaint form, proof of data misuse, screenshots
E-wallet or bank transfer to scammer	Your bank, GCash, Maya, remittance center, or payment provider	Transaction reference number, recipient details, police report if available
Fraudulent app in app store	Google Play, Apple App Store, or hosting platform	App link, screenshots, explanation of scam
Harassment, threats, or fraud listed in the 2026 advisory	DICT Cyber Hotline, NBI Cybercrime Division, PNP ACG	Evidence packet and incident narrative

The 2026 DICT-NPC-SEC advisory lists the following reporting channels for abusive online lending conduct:

SEC FINLEND through SEC iMessage and hotline 1-4732 / 1-4SEC
DICT Cyber Hotline: 1326@dict.gov.ph
NBI Cybercrime Division: ccd@nbi.gov.ph
PNP Anti-Cybercrime Group: acg@pnp.gov.ph and onlinecims.ocs@gmail.com

For a formal NPC complaint, the NPC requires a specific complaint format. Its complaint page states that the formal complaint form should be printed, filled out, notarized, and submitted in person, by courier, or by scanned email through the official NPC process.

How To Prepare a Strong Complaint

A good complaint is not just “na-scam po ako.” It should be organized and easy to verify.

Use this structure:

Your details
- full name
- address
- contact number
- email
- valid ID
Name of the app, website, or person
- app name
- company name, if any
- agent name or username
- phone numbers
- social media links
- bank/e-wallet recipient details
Timeline
- when you downloaded the app or contacted the lender
- when you applied
- when they said you were approved
- when they demanded the deposit
- when you paid
- what they demanded next
- when threats or harassment started
Exact amount lost
- list each payment separately
- include date, time, amount, channel, and reference number
False statements made to you
- “loan approved”
- “deposit is refundable”
- “required by government”
- “pay to unfreeze”
- “pay to correct account number”
- “pay to avoid legal action”
Damage suffered
- money lost
- harassment
- reputational harm
- data privacy invasion
- identity theft risk
- emotional distress
- lost work time
Attachments
- screenshots
- receipts
- IDs submitted
- app permissions
- messages to your contacts
- call logs
- witness statements, if available

If you file with law enforcement or the prosecutor, you may be asked to execute a complaint-affidavit. This is a sworn written statement of facts. It should be signed before a notary public or authorized officer.

Should You Go to the Barangay?

For most online lending app scams, the barangay is usually not the main office that can solve the problem, especially if:

the scammer’s real name is unknown;
the scammer is in another city or country;
the transaction happened entirely online;
the issue involves cybercrime, data privacy, or an SEC-regulated lending activity.

Barangay conciliation is designed for certain disputes between individuals who live in the same city or municipality. It is usually not effective for anonymous online scammers.

However, a barangay blotter may still be useful if:

local people are harassing you in person;
your neighbors are being contacted;
you need a local record of threats;
the identified scammer is in your barangay or nearby.

For cyber-enabled fraud, go directly to PNP ACG, NBI Cybercrime, SEC, NPC, and your payment provider.

Can You Recover the Deposit?

Recovery is possible but not guaranteed.

The realistic options are:

Payment provider report
- Fastest possible route if funds are still traceable or the recipient account can be frozen.
- Success depends on speed, channel rules, and whether money was already withdrawn.
Criminal complaint
- Useful when there is fraud, false pretenses, threats, or organized scam activity.
- May lead to investigation, subpoenas, account tracing, and prosecution.
SEC complaint
- Useful when the entity is a lending or financing company, claims to be one, or operates an online lending platform.
- SEC action may include administrative sanctions, suspension, revocation, or enforcement measures.
NPC complaint
- Useful for contact shaming, unauthorized contact-list access, excessive permissions, threats using your personal data, or disclosure of your loan information to others.
Small claims case
- Useful only if you know the real identity and address of the person or company you are suing.
- Under the Supreme Court’s Rules on Expedited Procedures in the First Level Courts, small claims cover money claims up to ₱1,000,000, exclusive of interest and costs.
- Lawyers are generally not allowed to appear for parties in small claims hearings, which is why it is designed for ordinary people.
- This route is difficult if the scammer used fake names or mule accounts.

What If They Threaten To Sue You?

Scammers often threaten victims with fake legal language:

“You will be arrested.”
“We will file a case today.”
“We will send police to your house.”
“You violated AMLA.”
“We will post you as a scammer.”
“We will contact your employer.”
“You must pay legal clearance.”

A private lender cannot simply order your arrest. Debt, by itself, does not automatically mean imprisonment. A criminal case requires a legal basis, complaint, investigation, and court process.

If no loan was released and the demand is based only on your refusal to pay more fees, preserve the threats as evidence. Threats to shame you, contact uninvolved persons, or use your personal data may strengthen your SEC, NPC, and cybercrime complaints.

What If the App Messaged Your Contacts?

If the app contacted your family, employer, friends, or phone contacts after you paid or refused to pay, document everything.

Ask your contacts to send you:

screenshots of messages received;
phone numbers used;
dates and times;
any threats, insults, or false statements;
proof that they were not your guarantors.

Under the 2026 DICT-NPC-SEC advisory, contacting people in the borrower’s contact list other than guarantors is prohibited for debt collection purposes. A character reference is not the same as a guarantor.

You may report this to:

SEC, for unfair debt collection practices by lending or financing companies;
NPC, for unlawful or excessive processing of personal data;
PNP ACG or NBI Cybercrime, if threats, fraud, identity misuse, or cyber harassment are involved.

Practical Timelines and Bottlenecks

Step	Usual Timing	Common Bottleneck
Bank or e-wallet fraud report	Same day to several business days	Money may already be withdrawn
SEC complaint ticket	Submission can be immediate	Agency evaluation takes time; refund is not automatic
PNP/NBI cybercrime report	Initial report can be filed quickly	Need clear evidence and traceable accounts
NPC formal complaint	Depends on completion and notarization	Complaint must follow required format
Prosecutor complaint	Weeks to months	Respondent identity and address may be unknown
Small claims	Often faster than ordinary civil cases	Only useful if defendant can be identified and served

The most important timing issue is the payment trail. Report to your bank, e-wallet, or remittance provider as soon as possible.

Special Notes for OFWs and Foreigners

If you are outside the Philippines, you can still organize and submit reports online where the agency or provider allows it.

For sworn documents, you may need:

notarization before a Philippine Embassy or Consulate; or
notarization abroad followed by apostille or consular legalization, depending on the country and the document’s intended use.

Philippine embassies and consulates commonly provide notarial or acknowledgment services for affidavits, special powers of attorney, and sworn statements for use in the Philippines. Requirements vary by post, and personal appearance is often required.

If you are a foreigner who paid a deposit to a Philippine-based app or account, the same basic evidence rules apply. Keep payment receipts, account details, communications, and proof of identity. If your documents were issued abroad and must be used in Philippine proceedings, authentication or apostille requirements may apply depending on where the document was issued.

Common Mistakes To Avoid

Paying a second or third “release fee.”
Deleting chats before saving evidence.
Posting the scammer’s bank details publicly without preserving official evidence first.
Ignoring identity theft risk after sending IDs and selfies.
Filing only a social media complaint but not reporting to the bank/e-wallet.
Assuming that an app is legal just because it appears in an app store.
Believing screenshots of fake SEC, BIR, or court documents.
Letting threats push you into more payments.
Treating a character reference as a guarantor.
Signing a settlement or acknowledgment that says you received a loan when you did not.

Frequently Asked Questions

I paid a deposit to an online lending app. Can I get my money back?

Possibly, but recovery is not automatic. Report immediately to your bank, e-wallet, or remittance provider and ask if the recipient account can be flagged or frozen. Also prepare reports to SEC, PNP ACG or NBI Cybercrime, and NPC if your data was misused. The faster you report, the better the chance of tracing the payment.

Do I have to repay a loan that was never released?

Usually, no. If no loan proceeds were released to you, the app cannot honestly claim that you owe the full loan. Save proof that the money was never credited and that the only payment made was your deposit or fee.

Is it legal for a lending app to ask for a processing fee?

A legitimate lender may charge disclosed fees connected with a real loan transaction, but the fees must be transparent and lawful. A demand for repeated deposits before release, especially to personal accounts or under fake reasons, is a red flag for fraud.

What should I do if they ask for another payment to “unfreeze” my loan?

Do not pay. “Frozen loan,” “account correction,” “tax clearance,” and “release code” demands are common scam scripts. Save the messages and include them in your complaint.

Can the app legally message my contacts?

For debt collection, online lenders should not freely contact people in your phonebook. Under current NPC and SEC guidance, contacting persons in the borrower’s contact list other than guarantors is prohibited. A guarantor must separately consent to be responsible for the loan.

Should I uninstall the loan app immediately?

Save evidence first. Take screenshots of the app name, profile, loan approval, payment instructions, chats, and permissions. After preserving evidence, revoke permissions and uninstall the app if it is suspicious.

Can I file a case if I only lost a small amount?

Yes. Small losses can still be reported, especially if the same app or group is scamming many victims. Even if your individual loss is small, your report may help regulators or law enforcement identify a larger pattern.

Can I file small claims for the deposit?

Yes, if you know the real name and address of the person or company that received the money. Small claims can cover money claims up to ₱1,000,000, exclusive of interest and costs. If the scammer used fake identities, start with cybercrime and payment-channel reports.

What if I sent my ID and selfie?

Treat it as an identity theft risk. Change passwords, secure your accounts, monitor e-wallet and bank activity, and watch for accounts opened in your name. Include the ID and selfie submission in your NPC and cybercrime reports.

Is reporting to SEC enough?

Not always. SEC handles lending and financing company regulation, but fraud, threats, identity misuse, and data privacy violations may require reports to PNP ACG, NBI Cybercrime, NPC, and your payment provider.

Key Takeaways

A demand for a deposit before releasing an online loan is a major red flag.
If no loan proceeds were released, you usually do not owe the supposed loan amount.
Stop paying additional “unlocking,” “tax,” “insurance,” or “verification” fees.
Save screenshots, receipts, phone numbers, account names, app links, and threats before deleting anything.
Check the SEC list of recorded online lending platforms and report suspicious apps through SEC iMessage.
Report online fraud to PNP ACG or NBI Cybercrime, and report contact shaming or excessive data access to the NPC.
Contact your bank, e-wallet, or remittance provider immediately because the payment trail can disappear quickly.
If the scammer’s real identity is known, civil recovery through small claims may be possible.