Quick answer

An online loan is generally enforceable even if it was completed through an app. A borrower must pay a valid debt according to the agreed terms. However, owing money does not give a lender or collector the right to hide charges, exceed applicable interest caps, misuse phone data, shame the borrower, threaten unlawful action, contact unrelated people, or seize property without legal process.

For qualifying unsecured, general-purpose loans of ₱10,000 or less, payable within four months, and entered into, restructured, or renewed on or after April 1, 2026, the current SEC ceilings are:

Nominal interest: 6% per month or approximately 0.20% per day
Effective interest rate: 12% per month or approximately 0.40% per day
Late-payment penalty: 5% per month on the outstanding scheduled amount due
Total cost cap: all interest, fees, charges, and penalties combined cannot exceed 100% of the amount borrowed

These ceilings do not automatically apply to every loan. Larger loans, longer terms, secured loans, and loans from banks or other specially regulated institutions may follow different rules. Even where the numerical caps do not apply, charges must be properly disclosed, contract terms remain subject to consumer-protection law, and courts may refuse to enforce interest or penalties found to be unconscionable.

Nonpayment of an ordinary debt, by itself, is not a crime. The 1987 Constitution prohibits imprisonment for debt. A separate criminal case may arise only when the facts independently satisfy a criminal law—for example, fraud or the issuance of a worthless check under circumstances covered by law. A collector cannot truthfully claim that every missed app-loan payment automatically leads to arrest.

Identify the actual lender—not just the app name

The app is usually only the platform. The creditor is the corporation identified in the loan agreement, disclosure statement, privacy notice, disbursement record, or payment instructions.

Most non-bank lending and financing companies are supervised by the Securities and Exchange Commission. Banks, digital banks, and other BSP-supervised institutions fall under the Bangko Sentral ng Pilipinas. Cooperatives are generally under the Cooperative Development Authority, while privacy violations may be brought to the National Privacy Commission regardless of the lender’s licensing status.

Before borrowing—or before paying a collector—confirm:

The lender’s complete corporate name.
Its SEC registration number.
Its Certificate of Authority to operate as a lending or financing company.
Whether the app or online platform is associated with that company.
Its official customer-service and payment channels.
Whether its authority has been suspended or revoked.

Corporate registration alone is not enough. Under the Lending Company Regulation Act of 2007, a lending company must also have SEC authority to conduct lending business. An app-store listing, social-media page, business permit, or claim that an application is “SEC registered” is not conclusive proof.

The SEC’s current public contact point is SEC iMessage. If the relevant SEC list is unavailable or the app uses a different brand name, submit a verification request using the company name, app name, registration number, Certificate of Authority number, website, and developer details.

The lender must disclose the real cost before the loan is completed

The Truth in Lending Act is intended to let borrowers understand the true cost of credit before becoming bound. Online execution does not remove this obligation.

For a consumer loan, check that the lender disclosed clearly and before consummation:

The amount financed or principal
Any amount deducted before release
The actual net proceeds received
Interest in pesos
Processing, service, platform, verification, insurance, notarial, or similar charges
The effective interest rate
The payment schedule and due dates
Late-payment penalties
The total amount payable
Any security, guaranty, automatic-debit authority, or other material condition

A low advertised “daily rate” can be misleading if substantial fees are deducted before disbursement. Compare the cash actually received with the total amount required to be repaid, not just the advertised nominal rate.

SEC rules also require lending and financing companies to identify their corporate name, SEC registration number, and Certificate of Authority number conspicuously in advertisements and online platforms. Relevant rules include SEC Memorandum Circular No. 19, Series of 2019 and the SEC’s Truth in Lending implementation rules.

An electronic agreement is not invalid merely because it was accepted through a phone. The Electronic Commerce Act recognizes electronic documents and contracts, subject to authentication and other legal requirements. Save the exact version of the agreement, disclosure screen, and privacy notice presented when the loan was accepted; an app’s current terms may differ from the version governing an older loan.

Current interest and fee ceilings

Loans covered beginning April 1, 2026

Under SEC Memorandum Circular No. 14, Series of 2025, the recalibrated ceilings cover qualifying unsecured, general-purpose loans offered by lending or financing companies when:

The principal does not exceed ₱10,000
The term does not exceed four months
The loan was entered into, restructured, or renewed on or after April 1, 2026

For those loans:

Charge	Maximum
Nominal interest	6% per month
Effective interest rate, including non-penalty fees and charges	12% per month
Late or nonpayment penalty	5% per month on the outstanding scheduled amount due
Total interest, fees, charges, and penalties over the loan’s life	100% of the principal

The total-cost rule means that if the covered principal is ₱10,000, the combined non-principal costs cannot exceed ₱10,000. It does not erase the ₱10,000 principal.

Splitting, repackaging, restructuring, disguising fees, altering the stated tenor, using simulated collateral or sham guaranties, or similar arrangements to evade the ceilings may constitute a violation.

Covered loans from March 3, 2022 through March 31, 2026

For qualifying loans entered into, restructured, or renewed during this earlier period, SEC Memorandum Circular No. 3, Series of 2022 set the effective-interest ceiling at 15% per month, while retaining the 6% nominal-interest ceiling, 5% late-payment ceiling, and 100% total-cost cap.

Loans outside those categories

Do not assume that 6% or 12% is the legal ceiling for every loan. The special caps may not cover, among others, a loan above ₱10,000, a term exceeding four months, a genuinely secured loan, or credit governed by another regulator’s rules.

That does not give a lender unlimited discretion. The Financial Products and Services Consumer Protection Act requires responsible pricing and fair treatment. Charges must be disclosed, and a court may reduce or strike down interest or penalties that are excessive and unconscionable. Whether a particular rate is unconscionable depends on the contract and circumstances; a borrower should not simply substitute a preferred rate without a written agreement or legal ruling.

Core rights of a borrower

The Financial Products and Services Consumer Protection Act protects the following rights:

Equitable and fair treatment
Clear disclosure and transparency
Protection of assets against fraud and misuse
Data privacy and protection
Timely handling and redress of complaints

Every covered financial service provider must maintain a free consumer-assistance mechanism. It must explain what action it has taken or will take on a complaint.

A contract cannot validly waive a consumer’s right to sue, receive information, have complaints addressed, or have non-public client data protected. The lender also remains responsible for the conduct of its employees and agents. Engaging an outside collection agency does not allow the lender to avoid responsibility.

When the complaint involves a genuinely disputed amount or unauthorized transaction, the provider must, while its final investigation is pending, suspend the imposition of interest, fees, and charges or provide a similar reasonable accommodation as required by law. This protection should not be treated as permission to label an admitted debt “unauthorized”; explain the specific transaction or computation being disputed and provide evidence.

Privacy rights and app permissions

The Data Privacy Act, NPC Circular No. 2020-01, its 2022 amendments, and the government’s March 18, 2026 advisory on online lending platforms require lawful, transparent, necessary, and proportionate processing of personal data.

A lending app may not demand unlimited access merely because the borrower needs credit. In particular:

Camera or photo access may be used for a specified legitimate purpose such as identity verification, but access should be disabled or revocable when that purpose has been completed.
An app must not indiscriminately copy or save a borrower’s contacts for debt collection.
Unbridled processing of contact lists is prohibited.
Social-media contacts, photographs, email lists, location data, and device files cannot be harvested or used to shame or harass a borrower.
A lender must disclose automated processing, profiling, or credit scoring and the categories of information considered, subject to reasonable safeguards for the integrity of its evaluation method.
Data must not be retained indefinitely merely for an unspecified possible future use.
Borrowers have rights to information, access, correction, objection, and other remedies provided by the Data Privacy Act.

The 2026 advisory recognizes that contact-list access may be used narrowly to let a borrower select a character reference or guarantor, or to derive proportionate metadata when necessary for a specified legitimate purpose. That is not authority to harvest the whole address book or use it as a collection directory.

Consent obtained through pre-ticked boxes, obscured choices, or an interface that makes consent easy to grant but difficult to withdraw may not be valid consent.

Character reference versus guarantor

A character reference is not automatically liable for the debt. A guarantor is someone who separately and expressly binds himself or herself to answer for the borrower’s obligation if the borrower defaults.

The borrower should inform a proposed reference before providing the person’s details. The lender must inform that person how the information was obtained and, when feasible, allow its removal. A guarantor’s separate consent must be obtained.

For debt collection, contacting people in the borrower’s contact list other than declared guarantors or co-makers is prohibited. A lender cannot convert friends, relatives, co-workers, or character references into guarantors merely by naming them in an app.

What collectors may and may not do

A lender may send demands, negotiate payment, engage a collection agency, and file a civil action. It may use reasonable and legally permissible collection methods.

Under SEC Memorandum Circular No. 18, Series of 2019, prohibited practices include:

Violence or threats of violence
Threatening action that cannot legally be taken
Obscenities, insults, or profane and abusive language
Publishing the borrower’s name or personal information to shame the borrower
Communicating information known or reasonably known to be false
Failing to disclose that a debt is disputed when communicating permitted loan information
Pretending to be a police officer, court employee, lawyer, or government agency
Using other false representations or deceptive methods
Contacting the borrower before 6:00 a.m. or after 10:00 p.m., subject to the circular’s limited exceptions when the account is over 15 days past due or the borrower has expressly agreed that those are the only reasonable times
Contacting people in the borrower’s contact list who were not named as guarantors or co-makers, even if the borrower supposedly consented generally

Collectors handling an account must disclose their full name or true identity. The lender must maintain a customer-service function for complaints. Its responsibility continues even if collection was outsourced.

A collector generally may not disclose the debt to an employer, co-worker, neighbor, or relative who is not properly involved in the obligation. A visit or demand letter is not automatically unlawful, but the collector cannot threaten, trespass, impersonate an officer, take property without lawful authority, or represent that a private demand is already a court order.

What to do if the amount is wrong or payment is difficult

1. Ask for a written account breakdown

Request:

Original principal
Net proceeds released
Every payment received and how it was applied
Contractual interest
Effective interest rate
Each fee and penalty
Outstanding principal
Total amount demanded
The legal and contractual basis for disputed charges
The collector’s authority to act for the creditor

Do not rely only on a figure given by phone or chat.

2. State the dispute precisely

Identify whether the issue is an unauthorized loan, incorrect payment posting, undisclosed deduction, fee above an applicable cap, mistaken identity, duplicate account, or misuse of data. Attach receipts and other proof.

Do not make a false fraud report for a loan you knowingly obtained. If only part of the account is disputed, identify the undisputed portion.

3. Propose an affordable arrangement

If the debt is valid but unaffordable, ask in writing for restructuring, a revised payment schedule, waiver or reduction of penalties, or a settlement figure. Explain what amount can realistically be paid and when.

There is no universal right to an extension or automatic grace period for an ordinary app loan. Any agreement should be confirmed in writing before payment. Check whether restructuring will add fees, restart interest, or fall under the current rate caps.

4. Pay only through a verified channel

Confirm payment instructions using the lender’s official website, app, or customer-service contact. Be cautious if a collector asks for payment to a personal bank or e-wallet account.

Keep the receipt, transaction reference, recipient account, date, amount, and confirmation that the payment was credited. After full settlement, request a written certificate or confirmation of payment.

5. Protect the device and accounts

After preserving evidence:

Revoke unnecessary app permissions.
Change compromised passwords and PINs.
Enable multi-factor authentication.
Review bank and e-wallet transactions.
Contact the account provider immediately about unauthorized debits.
Remove the app if continued installation presents a security risk.

Uninstalling the app does not cancel a valid loan.

Evidence to preserve

Before deleting messages or removing the app, save:

The app name, icon, developer, store page, download link, and version
The lender’s corporate name and claimed SEC or Certificate of Authority numbers
The loan contract and disclosure statement
Screens showing the offer, net proceeds, rates, fees, due date, and total payable
Privacy notices, consent screens, and requested permissions
Disbursement records and payment receipts
Account statements and transaction reference numbers
Collection texts, emails, chats, social-media posts, and call logs
The collector’s name, number, agency, and claimed authority
Messages sent to relatives, friends, co-workers, or employers
Screenshots showing dates, times, account names, and full message context
Written disputes, requests for correction, and the lender’s replies
SEC, BSP, NPC, police, or cybercrime complaint reference numbers

Ask affected contacts to preserve the original message and sender details. Avoid editing screenshots. Keep backup copies outside the phone.

Where to complain

SEC-supervised lending or financing company

First use the lender’s official consumer-assistance channel and keep proof. If the response is absent or unsatisfactory, file through SEC iMessage and select the service for complaints against financing or lending companies.

Include the legal company name, app name, loan date, principal, term, disputed charges, collection conduct, relief requested, and supporting evidence. Keep the electronic ticket number.

BSP-supervised institution

Complain first through the institution’s Financial Consumer Protection Assistance Mechanism. If unresolved, escalate through the BSP Consumer Assistance Mechanism, preferably using the BSP Online Buddy. If that is unavailable, the BSP currently accepts its complaint form at consumeraffairs@bsp.gov.ph, together with proof of the complaint first made to the institution.

Privacy violation

Write first to the lender or its data protection officer, identify the privacy violation, and request corrective action. Under the NPC’s current complaint mechanics, a complainant generally must show that the respondent failed to take appropriate action or did not respond within 15 calendar days after receiving written notice. The NPC may waive this requirement for good cause or in serious cases involving urgent or irreparable harm.

A formal complaint must comply with the 2021 NPC Rules of Procedure, as amended, including verification, supporting evidence, correspondence with the respondent, requested relief, and a certification against forum shopping. Use the NPC’s current complaint page and Complaints-Assisted Form.

Threats, fraud, impersonation, or cyber harassment

For credible threats of harm, fraudulent loan accounts, extortion, doxxing, impersonation of authorities, or other possible crimes, preserve the evidence and contact the appropriate law-enforcement or cybercrime office immediately. The March 2026 joint advisory identifies the DICT Cyber Hotline at 1326@dict.gov.ph, the NBI Cybercrime Division at ccd@nbi.gov.ph, and the PNP Anti-Cybercrime Group at acg@pnp.gov.ph.

An SEC or NPC complaint does not replace an urgent police report where personal safety is at risk.

If the lender files a court case

A demand letter, text message, or collector’s warning is not a summons. A genuine summons identifies the court, case number, parties, and required response and is served according to court rules.

Claims for payment of money not exceeding ₱1 million, exclusive of interest and costs, may be handled under the Supreme Court’s Rules on Expedited Procedures in the First Level Courts. In a small-claims case, the defendant is generally required to file a verified Response, with supporting evidence, within 10 calendar days after receiving the summons. Failure to respond can result in judgment based on the lender’s evidence.

Do not ignore court papers even if the lender or collector previously violated SEC or privacy rules. Harassment does not automatically extinguish the underlying loan. Bring the summons, contract, disclosure statement, computation, receipts, and evidence of disputed charges to a lawyer or legal-aid office immediately.

A collector cannot independently garnish wages, freeze an account, or seize property. Those remedies ordinarily require a court case, judgment, and lawful execution process.

Common mistakes to avoid

Assuming that an app-store listing proves the lender is authorized
Checking only the app brand instead of the creditor’s corporate name
Comparing only the advertised rate and ignoring deductions and fees
Accepting restructuring without a written computation
Paying a collector’s personal account without verification
Deleting the app or messages before preserving evidence
Posting IDs, loan documents, or account details publicly
Believing a complaint automatically cancels or suspends the debt
Treating a character reference as automatically liable
Ignoring a genuine court summons
Borrowing from another expensive app solely to roll over the first loan
Making a false identity-theft or fraud report instead of disputing the actual computation

When help is urgent

Seek immediate legal or law-enforcement help when:

There is a credible threat of violence, sexual harm, kidnapping, or damage to property.
Private photographs, IDs, contact lists, or loan information are being published or sent to others.
A loan was opened using stolen identity information.
Money is being debited from a bank or e-wallet without authority.
A collector is impersonating police, a court, or a government officer.
Someone demands payment to stop publication of private information.
You receive a genuine summons, subpoena, notice of hearing, or writ.
A small-claims response deadline is already running.
The lender seeks to take collateral or other property without clear contractual and legal authority.
The disputed balance is large enough that an incorrect admission, settlement, or restructuring could materially prejudice your position.

Frequently asked questions

Can I be arrested simply because I missed an online-loan payment?

No. Ordinary nonpayment is a civil matter, and the Constitution prohibits imprisonment for debt. Separate fraudulent or criminal conduct may be prosecuted only if its own legal elements are present.

Does harassment erase the loan?

Not automatically. The borrower may complain and seek applicable remedies, but the valid principal and lawful charges may remain payable.

May the lender message everyone in my contacts?

No. Unbridled harvesting or use of a contact list for debt collection is prohibited. For collection, people other than properly declared guarantors or co-makers should not be contacted about the debt.

Is my character reference required to pay?

No, not merely because the person was named as a reference. Liability as a guarantor requires a separate and express undertaking.

Can the lender post my name or photograph on social media?

Publishing personal information to shame an alleged delinquent borrower is an unfair collection practice and may also violate the Data Privacy Act.

Is every interest rate above 6% per month illegal?

No. The 6% nominal ceiling applies to the specific small, short-term loans covered by the SEC circular. Other loans require separate analysis. They remain subject to disclosure, responsible-pricing requirements, the contract, and the rule against unconscionable terms.

What if I received less cash than the stated principal?

The difference may consist of disclosed fees, but it affects the loan’s effective cost. Request the disclosure statement and compare the stated principal, deductions, net proceeds, finance charge, and total payable. Undisclosed or excessive deductions should be disputed.

Can I stop collectors from calling at work?

You may request a reasonable written communication channel. The lender cannot disclose the debt to unrelated co-workers or an employer merely to pressure or shame you. Whether a particular direct contact with the borrower is permissible depends on its timing, manner, and the information disclosed.

Can a collector take my phone or household property?

Not merely on the strength of a text, demand letter, or collection visit. A collector has no general power to seize property without the borrower’s valid consent or lawful judicial process.

Can I correct a wrong credit record?

Yes. Obtain the relevant credit report and dispute erroneous, incomplete, misleading, or outdated data. The Credit Information Corporation provides an online dispute-resolution process, supported by contracts, receipts, and other records.

Official legal sources

This article provides general Philippine legal information, not advice for a specific loan, lawsuit, or privacy complaint. Outcomes depend on the lender’s regulator, the contract, transaction date, loan amount and term, evidence, and surrounding facts. Official sources and procedures were last checked on July 23, 2026.