A Philippine Legal Article

I. Overview

Online lending has become common in the Philippines because it offers fast access to cash with minimal paperwork. Legitimate online lending companies may lawfully operate if they are properly registered and comply with Philippine lending, consumer protection, privacy, and financial regulations.

However, many Filipinos encounter fraudulent or abusive online lending schemes. One common scam involves a supposed lender requiring the borrower to pay “advance fees” before loan release. After the victim pays, the lender demands more money or refuses to release the loan. In worse cases, the scammer threatens the victim with an “NBI complaint,” criminal case, public shaming, or harassment of family members and contacts.

This article discusses the legal issues, possible violations, rights of the victim, remedies, evidence preservation, and practical steps under Philippine law.

II. Typical Scam Pattern

A common online lending advance-fee scam follows this pattern:

A person applies for a loan through Facebook, Messenger, Telegram, Viber, WhatsApp, SMS, a website, or a mobile app.
The supposed lender approves the loan quickly, often without proper verification.
The borrower is told to pay a “processing fee,” “notarial fee,” “insurance fee,” “activation fee,” “release fee,” “AML fee,” “tax,” “security deposit,” or “verification fee.”
After the borrower pays, the lender claims there is another problem and demands another payment.
The loan is never released.
When the borrower asks for a refund or refuses to pay more, the scammer threatens to file a complaint with the NBI, police, barangay, court, or employer.
The scammer may also threaten to post the borrower’s photo, ID, or personal information online.
The scammer may message the borrower’s contacts, family, or workplace.

This is usually not a genuine loan transaction. It is often a fraud scheme designed to extract money through false promises and intimidation.

III. Advance Fees in Online Lending: Why They Are Suspicious

A legitimate lender may charge fees, but abusive or fraudulent lenders often require payment before releasing any loan proceeds. This is a major warning sign.

In a genuine loan transaction, fees are usually disclosed clearly and deducted from the loan proceeds or collected according to a transparent agreement. A lender that repeatedly demands advance payments before releasing funds may be committing fraud, especially if the supposed loan is never actually released.

Common suspicious fee labels include:

Processing fee
Approval fee
Insurance fee
Activation fee
Release fee
Verification fee
Attorney’s fee
Notarial fee
Documentary stamp fee
Anti-money laundering clearance fee
Refundable deposit
Account correction fee
Penalty for wrong account number
Loan code unlocking fee

The label used by the scammer does not control the legal analysis. What matters is the conduct: the false promise of loan release in exchange for payment.

IV. Possible Criminal Liability

A. Estafa under the Revised Penal Code

The most obvious possible offense is estafa, or swindling.

Estafa may arise when a person defrauds another through deceit, false pretenses, or fraudulent acts, causing damage. In an advance-fee lending scam, the deceit may consist of falsely pretending that a loan has been approved and will be released once the victim pays certain fees.

The essential idea is:

There is a false representation;
The victim relied on it;
The victim paid money because of it; and
The victim suffered damage.

For example, if a person says, “Pay ₱5,000 processing fee and your ₱100,000 loan will be released,” but there is no real loan and the person only intends to keep the ₱5,000, this may support an estafa complaint.

If the scammer repeatedly invents new fees after each payment, that pattern may strengthen the showing of fraudulent intent.

B. Cybercrime Implications

If the scam was committed through online platforms, messaging apps, mobile apps, websites, or digital payment systems, the conduct may also involve the Cybercrime Prevention Act of 2012.

Estafa committed through information and communications technology may be treated as cyber-related fraud. The use of electronic communications can be relevant where the deceit, demand, payment instruction, or threat occurred online.

Evidence such as screenshots, chat logs, transaction receipts, usernames, phone numbers, URLs, app names, and digital wallet details can therefore be important.

C. Grave Threats, Light Threats, or Unjust Vexation

Threatening a borrower with harm, humiliation, false criminal complaints, or exposure of private information may give rise to separate criminal issues.

Depending on the exact words used, the threat may potentially fall under:

Grave threats;
Light threats;
Coercion;
Unjust vexation; or
Other applicable offenses.

A threat to file a legitimate complaint is not automatically unlawful. A person may complain to authorities if they have a lawful basis. However, a threat becomes legally problematic when it is used to extort money, force payment of a non-existent obligation, intimidate a victim into paying more scam fees, or threaten unlawful harm.

For example:

“Pay another ₱10,000 or we will file an NBI case against you and ruin your name.”

This may be evidence of intimidation, especially if the threat is baseless and made to obtain more money.

D. Extortion or Robbery-Related Concerns

Where threats are used to force a victim to give money, the facts may also raise extortion-type concerns. The precise legal classification depends on the threat, the method used, and the surrounding circumstances.

In practical terms, the victim should not focus only on the exact legal label. The victim should present the full facts to law enforcement or a lawyer: the promise of a loan, the demand for advance fees, the failure to release funds, and the threats made after the victim refused to pay more.

E. Identity Theft and Misuse of Personal Data

Many online loan scammers ask victims to submit IDs, selfies, signatures, bank details, payslips, or contact lists. If the scammer uses these details to impersonate the victim, create fake accounts, apply for loans, or harass third parties, additional legal consequences may arise.

Possible legal issues include:

Identity theft;
Unauthorized use of personal information;
Data privacy violations;
Cyber libel, if defamatory statements are posted online;
Harassment or malicious messaging to contacts.

Victims should treat the compromise of personal IDs as serious. They should monitor accounts, change passwords, secure e-wallets, and consider reporting the identity compromise to relevant institutions.

V. Threats of an “NBI Complaint”: What They Mean Legally

Many scammers invoke the NBI because the name sounds intimidating. They may say:

“We will file an NBI complaint.”
“You are now under NBI investigation.”
“NBI will arrest you tomorrow.”
“You will be blacklisted by NBI.”
“We have coordinated with NBI Cybercrime.”
“You will be charged with fraud if you do not pay.”

These statements are often used to scare victims.

A. The NBI Does Not Automatically Arrest Someone Because of a Private Chat

The NBI may investigate complaints, but a scammer cannot simply cause an arrest by sending a message. In general, criminal prosecution requires proper complaint, investigation, evidence, and legal process.

A private person cannot lawfully use the name of the NBI to extort money.

B. Nonpayment of Debt Is Generally Civil, Not Automatically Criminal

In the Philippines, failure to pay a debt is generally a civil matter, not automatically a criminal offense. A borrower is not automatically a criminal merely because they failed to pay a loan.

However, criminal liability may arise if there was fraud from the beginning, such as obtaining money through deceit. That is different from mere inability to pay.

In an advance-fee scam, the victim is usually the one defrauded, not the offender.

C. A Fake Threat of NBI Complaint May Be Evidence Against the Scammer

If the supposed lender threatens an NBI complaint to force more payment after failing to release the loan, those threats should be preserved. They may support a complaint for fraud, threats, coercion, harassment, or cybercrime-related offenses.

VI. Difference Between a Legitimate Online Lender and a Scam

A legitimate online lender usually has:

Proper registration;
Identifiable business name;
Physical or verifiable office address;
Clear loan terms;
Written agreement;
Transparent fees;
Lawful collection practices;
Privacy policy;
Customer support channels;
Compliance with applicable regulations.

A scammer usually has:

Anonymous or fake profile;
No verifiable registration;
No legitimate office;
Unrealistically fast approval;
Advance fee demands;
Repeated new fees;
Refusal to release loan proceeds;
Threats after payment;
Use of personal accounts or e-wallets for payment;
Pressure tactics;
Poor grammar or inconsistent names;
Fake IDs, fake certificates, or fake approval letters.

The presence of a business name or logo does not prove legitimacy. Scammers often copy names, certificates, and logos.

VII. Online Lending Harassment in the Philippines

Aside from outright scams, some online lending apps engage in abusive collection practices. These may include:

Shaming borrowers online;
Sending threats;
Contacting the borrower’s phone contacts;
Calling employers;
Sending defamatory messages;
Using fake legal notices;
Threatening arrest;
Misusing photos or IDs;
Excessive and repeated calls;
Using obscene or insulting language.

These acts may violate consumer protection rules, privacy laws, cybercrime laws, and criminal laws depending on the facts.

Even if a borrower genuinely owes money, collectors are not allowed to harass, threaten, defame, or misuse personal information.

VIII. Data Privacy Issues

Online lending scams often involve personal data abuse. The victim may have submitted:

Government ID;
Selfie with ID;
Signature;
Address;
Mobile number;
Bank details;
E-wallet number;
Employment details;
Contact list;
Social media account;
Photos.

Under Philippine data privacy principles, personal information should be collected and processed lawfully, fairly, and only for legitimate purposes. Unauthorized disclosure, malicious use, or excessive collection may raise liability.

A lending app that accesses a borrower’s contact list and uses it to shame or threaten the borrower may create serious privacy concerns.

Victims should preserve evidence of:

Permission screens;
App screenshots;
Messages sent to contacts;
Posts using the victim’s photo;
Unauthorized disclosure of ID or address;
Harassing calls or messages.

IX. Civil Liability

The victim may also have civil claims. If money was paid because of deceit, the victim may seek recovery of the amount, damages, attorney’s fees, and other appropriate relief.

Possible civil concepts include:

Fraud;
Unjust enrichment;
Damages;
Breach of obligation, if a written agreement exists;
Return of money paid under false pretenses.

In practice, recovery depends on whether the scammer can be identified and located. Many scammers use fake identities, mule accounts, or disposable numbers, which makes enforcement difficult. Still, reporting can help authorities trace patterns, payment accounts, and repeat offenders.

X. Evidence to Preserve

The strength of a complaint often depends on evidence. Victims should preserve everything before blocking or deleting conversations.

Important evidence includes:

Screenshots of the loan offer;
Screenshots of approval messages;
Screenshots of all fee demands;
Screenshots of threats;
Names, usernames, phone numbers, and account names used;
Links to Facebook pages, websites, apps, or profiles;
Payment receipts;
GCash, Maya, bank, or remittance transaction records;
Account numbers or wallet numbers where money was sent;
Copy of the supposed loan agreement;
Copies of fake legal notices;
Voice recordings or call logs, where lawfully obtained;
Names of contacts who received harassment;
Screenshots of public posts or defamatory messages;
App name, developer name, and download link;
Email headers, if email was used;
Device details and timestamps.

Screenshots should show the full conversation context, date, time, sender identity, and phone number or profile where possible.

Victims should not edit screenshots except to redact sensitive information for public sharing. For official complaints, unredacted copies may be needed.

XI. Where Victims May Report

Depending on the facts, a victim may consider reporting to:

A. Philippine National Police Anti-Cybercrime Group

If the scam happened online or through electronic means, the PNP Anti-Cybercrime Group may be relevant.

B. National Bureau of Investigation Cybercrime Division

If the scammer used online platforms, fake identities, or cyber threats, the NBI Cybercrime Division may be relevant.

C. Local Police Station

Victims may also report to the local police station, especially if there are threats, harassment, or identifiable suspects.

D. Barangay

For local disputes involving known individuals, barangay proceedings may sometimes be relevant. However, many online lending scammers are anonymous or located elsewhere, so barangay conciliation may not be practical.

E. Securities and Exchange Commission

For lending or financing companies, complaints may be brought to the SEC if the entity claims to be a lending company, financing company, or online lending platform.

F. National Privacy Commission

If there is misuse, unauthorized disclosure, or abusive processing of personal data, the victim may consider a complaint with the NPC.

G. Bangko Sentral ng Pilipinas

If a bank, e-wallet, payment service, or financial account was used, the victim may contact the relevant financial institution and, where appropriate, escalate consumer concerns involving BSP-supervised entities.

H. Platform Reports

Victims should report fake pages, accounts, apps, or groups to:

Facebook;
Messenger;
Telegram;
Viber;
WhatsApp;
Google Play Store;
Apple App Store;
GCash, Maya, or bank fraud teams.

Reporting to platforms can help suspend accounts, although it does not replace filing with authorities.

XII. What to Do Immediately After Being Scammed

A victim should act quickly.

First, stop paying additional fees. Scammers often use urgency and fear to extract more money.

Second, preserve all evidence. Do not delete conversations.

Third, contact the bank, e-wallet, or remittance provider used for payment. Ask whether the transaction can be flagged, reversed, or investigated. Reversal is not guaranteed, but early reporting helps.

Fourth, report the scam to law enforcement or relevant regulators.

Fifth, secure personal accounts. Change passwords, enable two-factor authentication, and monitor financial accounts.

Sixth, warn close contacts if the scammer has access to the victim’s contact list or threatens to message family and friends.

Seventh, avoid negotiating emotionally with the scammer. A short message asking for refund may be useful, but prolonged arguments can give the scammer more information.

XIII. Sample Response to the Scammer

A victim may send one firm message, then stop engaging:

I deny any obligation to pay additional advance fees. You represented that the loan would be released after payment, but no loan was released. Your continued demand for money and threats of an NBI complaint are noted and preserved as evidence. I am reporting this matter to the appropriate authorities. Do not contact my family, employer, or contacts, and do not use or disclose my personal information.

After that, continued engagement may not be helpful.

XIV. Can the Scammer Really File a Case Against the Victim?

Anyone can attempt to file a complaint. But filing a valid complaint requires facts and evidence.

If the victim never received the loan proceeds, then the supposed lender may have difficulty claiming that the victim owes a loan. If the only money that changed hands was paid by the victim to the scammer as advance fees, the victim is likely the complainant, not the debtor.

If the victim did receive loan proceeds from a legitimate lender, nonpayment alone is generally not enough to make the borrower a criminal. The lender may pursue collection, civil action, or lawful remedies, but harassment and threats remain improper.

The key distinction is:

No loan released, but advance fees collected: possible scam against the borrower.
Loan released, borrower failed to pay: generally a debt collection matter, subject to lawful collection rules.
Borrower used false documents or deceit to obtain a loan: possible criminal issue against the borrower.
Collector uses threats, shaming, or data misuse: possible liability against the collector or lender.

XV. Fake Legal Documents and Fake NBI Notices

Scammers sometimes send fake documents to frighten victims. These may be labeled as:

Subpoena;
Warrant of arrest;
NBI complaint;
Cybercrime complaint;
Demand letter;
Court order;
Blacklist notice;
Hold departure order;
Barangay blotter;
Police report.

Victims should examine these carefully. Fake documents often contain:

Wrong grammar;
No official docket number;
No proper signature;
No court branch;
No verifiable office;
Threatening language;
Demand for immediate payment to a personal account;
Use of seals or logos without authority;
Incorrect legal terminology.

A real warrant, subpoena, or court order follows formal legal processes. It is not normally issued through random chat messages demanding payment to a personal e-wallet.

Using fake government or court documents may create additional legal liability for the scammer.

XVI. Role of Payment Accounts and Mule Accounts

Scammers often use accounts under different names. These may be:

Mule bank accounts;
Compromised e-wallets;
Fake verified accounts;
Accounts rented from third parties;
Personal accounts of recruiters or agents.

Victims should record:

Exact account name;
Account number;
Mobile number;
Bank or e-wallet provider;
Date and time of transfer;
Reference number;
Amount sent.

Even if the scammer used a mule account, the payment trail may still help authorities.

XVII. Online Lending Apps and Contact-List Harassment

Some online lending apps ask for permissions to access contacts, camera, photos, location, or files. If the app later uses contacts to shame or threaten the borrower, the victim should document it.

Evidence from contacted persons is important. Ask recipients to screenshot the messages they received, including:

Sender’s number or account;
Message content;
Date and time;
Any photo, ID, or defamatory statement attached.

The borrower may also ask contacts to avoid engaging with the harasser and to preserve evidence.

XVIII. Employer and Workplace Threats

Scammers may threaten to contact the victim’s employer. They may say the victim will lose their job or be reported for fraud.

If the scammer contacts the workplace and makes false statements, possible issues include defamation, harassment, malicious disclosure of personal information, or interference with employment.

A victim may consider informing HR or a supervisor briefly:

I am currently a victim of an online lending scam. The scammers may attempt to contact my workplace using false or misleading claims. I have preserved the evidence and am reporting the matter to authorities. Please disregard any unauthorized messages and preserve copies if received.

This protects the victim from surprise reputational damage.

XIX. What Not to Do

Victims should avoid:

Paying more money out of fear;
Sending additional IDs or selfies;
Giving passwords or OTPs;
Downloading unknown apps;
Clicking suspicious links;
Deleting conversations;
Posting unredacted IDs online;
Threatening the scammer back;
Fabricating evidence;
Ignoring real legal documents if they later arrive through proper channels.

A victim should also avoid publicly accusing named individuals without evidence, as this can create defamation risks.

XX. Possible Defenses Scammers Use

Scammers may claim:

The fee was voluntarily paid;
The borrower entered wrong information;
The borrower violated a loan condition;
The fee was non-refundable;
The loan was delayed, not denied;
The lender is legitimate;
The borrower is the one committing fraud;
The borrower agreed to the terms.

These claims can be answered by evidence showing the overall pattern: repeated demands, no actual loan release, inconsistent explanations, refusal to refund, and threats.

XXI. Legal Theory of the Victim’s Complaint

A strong complaint narrative may be structured as follows:

The complainant applied for an online loan.
The respondent represented that the loan was approved.
The respondent required payment of a specific fee before release.
The complainant paid because of that representation.
The respondent did not release the loan.
The respondent demanded additional payments.
The respondent threatened the complainant with NBI complaint, arrest, public exposure, or harassment.
The complainant suffered monetary loss, emotional distress, and risk of identity misuse.
The complainant asks authorities to investigate for fraud, cybercrime-related offenses, threats, harassment, and misuse of personal data.

This factual framing is often more useful than using only legal conclusions.

XXII. Draft Complaint-Affidavit Outline

A victim preparing a complaint may organize facts this way:

1. Personal Details

Name, age, address, contact number, occupation.

2. Identity of Respondent

Known names, aliases, phone numbers, usernames, account links, bank or e-wallet accounts.

3. Chronology

State events in order, with dates and times.

4. Representations Made

Quote the messages promising loan approval and release.

5. Payments Made

List each payment:

Date;
Amount;
Method;
Recipient account;
Reference number;
Purpose stated by scammer.

6. Failure to Release Loan

Explain that despite payment, no loan was received.

7. Further Demands

List additional fees demanded.

8. Threats

Quote threats about NBI complaint, arrest, public posting, employer contact, or family harassment.

9. Damages

State total amount lost and other harm suffered.

10. Evidence

Attach screenshots, receipts, IDs used by scammer, links, call logs, and witness screenshots.

11. Prayer

Request investigation and filing of appropriate charges.

XXIII. Demand for Refund

Before or alongside reporting, a victim may send a written demand for refund. However, where the scammer is anonymous or threatening, it may be safer to proceed directly to reporting.

A demand message should be firm and factual:

You represented that my loan would be released upon payment of the required fees. I paid the amounts you demanded, but no loan was released. I demand the return of all amounts I paid. Your threats of NBI complaint and further demands for payment are being preserved as evidence.

Do not include unnecessary admissions. Do not apologize for a debt that may not exist.

XXIV. If the Victim Actually Signed a Loan Agreement

Sometimes scammers send documents for signature. A signed document does not automatically make the transaction legitimate. The victim should ask:

Was any loan amount actually released?
Who is the lender named in the agreement?
Is the lender registered?
Are the fees clearly stated?
Is the recipient account under the lender’s name?
Was the victim deceived into signing?
Are the terms unconscionable or unlawful?
Were threats used?

If no loan was released, the supposed lender’s claim for repayment is questionable.

If a loan was released, the borrower should distinguish legitimate repayment obligations from illegal collection conduct.

XXV. If the Victim Gave a Selfie With ID

This creates identity-theft risk. The victim should:

Save evidence of who requested the ID;
Avoid sending more documents;
Monitor bank and e-wallet accounts;
Watch for unauthorized loan applications;
Consider reporting identity compromise;
Notify banks or e-wallets if account details were exposed;
Change passwords and enable stronger authentication;
Be alert for SIM swap or OTP scams.

If the victim’s ID is used in fake posts or fake loan applications, that should be reported immediately.

XXVI. If Contacts Are Being Harassed

The victim should ask contacts to preserve messages and not argue with the scammer. A suggested reply from contacts may be:

I do not consent to receiving messages about another person’s alleged loan. Do not contact me again. Your message has been saved and may be reported to the authorities.

The victim should collect screenshots from multiple contacts to show a pattern of harassment and unauthorized disclosure.

XXVII. If the Scammer Posts the Victim Online

If the scammer posts the victim’s name, photo, ID, address, or false accusations online, the victim should:

Screenshot the post with URL and timestamp;
Ask trusted people to screenshot it too;
Report the post to the platform;
Avoid emotional public arguments;
Consider legal action for cyber libel, unjust vexation, threats, or privacy violations depending on content;
Include the post in the complaint.

If the post contains false accusations such as “scammer,” “criminal,” or “wanted,” and it identifies the victim, the legal risk to the poster may be serious.

XXVIII. Prescription and Urgency

Victims should report promptly. Delay can make tracing harder because scammers may delete accounts, change numbers, withdraw funds, or abandon wallets.

Even if legal prescription periods may be longer, practical investigation is easier when the report is made early.

Immediate reporting also helps establish that the victim objected to the fraud and threats.

XXIX. Common Questions

1. “Can I be arrested for not paying an online loan?”

Mere nonpayment of debt generally does not automatically result in arrest. Arrest requires legal process and a valid legal basis. Threats of immediate arrest through chat are often intimidation tactics.

2. “Can they file an NBI complaint?”

Anyone may try to complain, but a complaint must have basis. A scammer’s threat to file an NBI complaint does not prove that the victim committed a crime.

3. “Should I pay the additional fee to avoid trouble?”

Usually no. Paying more often encourages further demands. Preserve evidence and report.

4. “What if they know my address?”

Treat the threat seriously but calmly. Preserve evidence, inform trusted people, secure accounts, and report to authorities. If there is an immediate safety risk, contact local police.

5. “What if they message my contacts?”

Ask contacts to preserve screenshots. This may support complaints for harassment, privacy violations, or other offenses.

6. “Can I get my money back?”

Possibly, but recovery depends on tracing the recipient and freezing or reversing funds. Early reporting to the payment provider improves the chance, but reversal is not guaranteed.

7. “Is the loan valid if I never received the money?”

A loan generally requires delivery of money or the thing loaned. If no proceeds were released, the supposed lender’s claim is highly questionable.

8. “What if I gave wrong bank details and they demand a correction fee?”

This is a common scam tactic. Fraudsters often claim the borrower entered an incorrect account number and must pay a fee to correct it. Legitimate lenders normally do not require repeated personal-account payments to fix such issues.

XXX. Practical Legal Assessment

An online lending advance-fee scam with NBI threats may involve several overlapping legal concerns:

Fraud or estafa;
Cybercrime-related fraud;
Threats or coercion;
Harassment;
Data privacy violations;
Identity theft;
Defamation or cyber libel;
Consumer protection violations;
Misrepresentation as a lending company;
Use of fake government or legal documents.

The specific complaint should be based on facts and evidence, not merely suspicion.

XXXI. Best Practices for Future Borrowers

Before dealing with any online lender:

Verify registration and authority to operate;
Search for official websites and contact details;
Avoid lenders using personal e-wallets for fees;
Do not pay advance fees for unreleased loans;
Read all terms carefully;
Avoid apps that demand unnecessary permissions;
Do not send IDs to unknown persons;
Be suspicious of guaranteed approval;
Be suspicious of pressure tactics;
Confirm whether the lender has a real office and lawful business identity.

A legitimate lender should be transparent, verifiable, and professional. It should not threaten, shame, or extort borrowers.

XXXII. Conclusion

An online lending scheme that requires advance fees, refuses to release the promised loan, demands more money, and threatens an “NBI complaint” is a serious red flag. In the Philippine context, the victim may have remedies under criminal law, cybercrime law, data privacy law, consumer protection rules, and civil law.

The most important immediate steps are to stop paying, preserve evidence, secure personal information, report to the appropriate authorities, and avoid being intimidated by fake legal threats. A genuine legal complaint follows proper procedure. A scammer’s chat message invoking the NBI is not the same as a valid case, warrant, subpoena, or court order.

Victims should focus on documentation: screenshots, receipts, account numbers, usernames, phone numbers, app details, and witness messages. The more complete the evidence, the stronger the complaint.

This article is for general legal information in the Philippine context and is not a substitute for advice from a lawyer who can assess the specific facts, documents, and evidence.