The proliferation of mobile technology in the Philippines has led to a surge in Online Lending Platforms (OLPs). While many are legitimate, a significant number operate without the necessary licenses from the Securities and Exchange Commission (SEC). These "unregistered" apps often engage in predatory lending practices, harassment, and data privacy violations.
Under Philippine law, borrowers are not defenseless. Even when dealing with an illegal entity, specific statutes and regulations provide a framework for protection and redress.
1. The Legal Requirement for Registration
Under the Lending Company Regulation Act of 2007 (Republic Act No. 9474) and the Financing Company Act of 1998 (Republic Act No. 8556), no lending or financing company shall conduct business unless it is granted a Certificate of Authority (CA) by the SEC.
- Status of the Contract: While an unregistered entity lacks the authority to lend, Philippine jurisprudence generally holds that the principal amount borrowed must still be repaid to prevent "unjust enrichment." However, the excessive interest rates, penalties, and charges imposed by unregistered apps are frequently declared void for being unconscionable and contrary to morals.
2. Protection Against Harassment and Coercion
The most common grievance against unregistered OLPs is "debt shaming" or the use of threats. SEC Memorandum Circular No. 18 (Series of 2019) explicitly prohibits unfair debt collection practices, which apply to all lending companies and their third-party service providers:
- Prohibited Acts:
- Using threats of violence or other criminal means to harm the person, reputation, or property of any person.
- Using profane or abusive language.
- Contacting people in the borrower’s contact list without express consent (except for designated guarantors).
- Disclosing or threatening to disclose the borrower's name as a "deadbeat" or "scammer" on social media.
- Making false representations that the borrower will be arrested or that legal process has been served when it has not.
3. Data Privacy Rights
Unregistered apps often require "permissions" to access contacts, galleries, and social media accounts as a condition for the loan. This is a primary tool for harassment.
- The Data Privacy Act of 2012 (Republic Act No. 10173): Borrowers have the right to be informed of how their data is used. Accessing a contact list to harass third parties is a violation of the principle of "purpose limitation" and "proportionality."
- NPC Circular No. 20-01: The National Privacy Commission (NPC) has specifically banned OLPs from accessing a borrower's phone contacts and photo gallery if such access is unnecessary for determining creditworthiness.
4. Cease and Desist Orders (CDO)
The SEC regularly issues Cease and Desist Orders against unregistered OLPs. Once a CDO is issued, the app is legally prohibited from:
- Engaging in further lending activities.
- Collecting interest or penalties from existing loans.
- Operating their mobile applications or websites.
Note: Borrowers are encouraged to check the SEC website for the list of revoked or suspended OLPs. If an app is under a CDO, their legal standing to demand payment is severely compromised.
5. Summary of Borrower’s Rights
| Right | Description |
|---|---|
| Right to Fair Treatment | Protection against physical threats, insults, and public shaming. |
| Right to Data Privacy | Protection against unauthorized access to phone contacts and private photos. |
| Right to Full Disclosure | Under the Truth in Lending Act (RA 3765), borrowers must be informed in writing of the true cost of credit (finance charges, interests, etc.) prior to the transaction. |
| Right to File a Complaint | Borrowers can lodge formal complaints with the SEC, NPC, and the PNP Anti-Cybercrime Group. |
6. Legal Remedies and Actions
If a borrower is a victim of an unregistered and predatory OLP, the following steps are legally recognized in the Philippines:
- Administrative Complaint (SEC): File a complaint with the SEC’s Corporate Governance and Finance Department (CGFD) for violations of RA 9474 and SEC MC No. 18.
- Privacy Complaint (NPC): If the app accessed contacts or posted private information online, a complaint for violation of the Data Privacy Act can be filed.
- Criminal Charges:
- Cyber-Libel: Under the Cybercrime Prevention Act of 2012 (RA 10175), if the lender posts defamatory comments on social media.
- Grave Coercion or Threats: Under the Revised Penal Code, if the lender uses physical or psychological violence to force payment.
- Small Claims Court: If a lender sues for payment, the borrower can raise the illegality of the interest rates and the lack of a Certificate of Authority as a defense to significantly reduce the amount owed.