The rapid expansion of financial technology (FinTech) in the Philippines has democratized access to credit through Online Lending Applications (OLAs). However, this digital convenience has given rise to systemic challenges: unconscionable interest rates and predatory debt collection practices, commonly manifested as "online shaming." Filipino borrowers frequently find themselves trapped in compounding debt cycles while facing severe violations of their dignity and privacy rights.

This legal article outlines the regulatory protections available to borrowers in the Philippines and provides a comprehensive guide on where and how to file complaints against abusive lenders.

I. The Legal Boundaries: What Constitutes an Offense?

Before filing a complaint, it is essential to determine which specific laws or regulations the lender has breached. Regulatory offenses generally fall into two categories: unfair collection practices and illegal pricing.

A. Unfair Debt Collection Practices and Online Shaming

Under SEC Memorandum Circular (MC) No. 18, Series of 2019, lending companies, financing companies, and their third-party collection agencies are strictly prohibited from employing abusive, unethical, and unfair means to collect debts. Prohibited conduct includes:

Physical Harm and Threats: Using or threatening to use violence to harm the physical person, reputation, or property of the borrower or their family.
Insults and Obscenities: Employing profane language, insults, or obscenities to abuse the debtor.
Online Shaming & Disclosure Breach: Publicly disclosing or publishing the names, photos, and personal information of borrowers who allegedly refuse to pay.
Contact List Exploitation: Contacting individuals on the borrower’s phone contact list who were not expressly named as guarantors or co-makers.
Unreasonable Contact Hours: Communicating with the borrower before 6:00 AM or after 10:00 PM, unless the account is past due for more than 15 days or express prior consent was given.

B. Excessive and Unconscionable Interest Rates

While the Usury Law ceilings remain suspended for general commercial lending, specific macro-regulations protect small-value consumers. Under SEC MC No. 14, Series of 2025 (the recalibrated ceilings on interest rates), specific caps are mandated for unsecured, general-purpose loans not exceeding ₱10,000 with a term of up to four months:

Loan Cost Category	Prescribed Regulatory Ceiling
Nominal Interest Rate (NIR)	Maximum of 6% per month (~0.20% per day)
Effective Interest Rate (EIR)	Maximum of 12% per month (~0.40% per day) — includes NIR plus processing, service, and notarial fees
Late Payment Penalties	Maximum of 5% per month on the outstanding scheduled amount due
Total Cost Cap	100% of the total amount borrowed — The total accumulated interest, fees, and penalties can never exceed the principal amount

II. Where to File Complaints: Institutional Jurisdictions

Depending on the nature of the violation—whether it is regulatory, a privacy breach, or a criminal act—complaints must be routed to the specific government agency holding jurisdiction.

1. Securities and Exchange Commission (SEC)

Jurisdiction: Registered Lending Companies (LCs), Financing Companies (FCs), and OLAs. It also investigates unregistered, illegal lending applications operating without a license.
Grounds for Complaint: Violation of interest rate caps, non-disclosure of true loan terms (violating the Truth in Lending Act / RA 3765), or unfair collection mechanisms.
Filing Process: Complaints are processed by the Enforcement and Investor Protection Department (EIPD). Borrowers can submit a formal, verified complaint form via email at eipd@sec.gov.ph or through the SEC online portal. The complaint must include the registered corporate name of the lender, the app name, and a chronological account of the violations.
Remedies: Administrative fines up to ₱1,000,000, suspension of lending operations, or total revocation of the lender's Certificate of Authority (CA).

2. National Privacy Commission (NPC)

Jurisdiction: Violations concerning the illicit harvesting, processing, and unauthorized usage of personal data under the Data Privacy Act of 2012 (RA 10173).
Grounds for Complaint: Unauthorized access to phone contact lists, photos, or social media profiles; calling contacts to inform them of a borrower's debt; and public shaming via social media platforms.
Filing Process: File a verified, notarized complaint with the Legal and Enforcement Office via email at complaints@privacy.gov.ph.
Note on Exhaustion of Remedies: The NPC rules generally require that you first notify the lender in writing of the data breach/privacy violation, giving them 15 days to respond, before escalating the matter to the Commission.
Remedies: Cease-and-desist orders on data processing (effectively pulling down the app), administrative fines, and recommendation of criminal prosecution for unauthorized data disclosure.

3. Bangko Sentral ng Pilipinas (BSP)

Jurisdiction: Banks, quasi-banks, credit card companies, and digital banks supervised directly by the central bank.
Grounds for Complaint: Exorbitant credit card charges, predatory microfinance banking practices, or violations of consumer rights under the Financial Products and Services Consumer Protection Act (RA 11765).
Filing Process: Submit a complaint through the BSP Consumer Assistance Mechanism (CAM) via email at consumeraffairs@bsp.gov.ph or through the automated virtual assistant on the official BSP website.
Remedies: Consumer restitution or refunds, administrative sanctions against the financial institution, or formal mediation.

4. Law Enforcement Agencies (PNP-ACG and NBI-CCD)

Jurisdiction: Criminal offenses committed through digital means under the Cybercrime Prevention Act of 2012 (RA 10175) and the Revised Penal Code.
Grounds for Complaint: Grave threats, extortion, cyber-libel (online defamation), blackmail, and identity theft.
Filing Process: * Philippine National Police - Anti-Cybercrime Group (PNP-ACG): File an official report at the nearest regional ACG desk or submit an e-complaint via cybercrime.pnp.gov.ph.
National Bureau of Investigation - Cybercrime Division (NBI-CCD): File a walk-in complaint at the NBI Main Office or through their official cybercrime portal.
Remedies: Criminal investigation, case buildup, tracking of digital footprints, and subsequent prosecution leading to imprisonment.

III. Evidentiary Requirements: Building a Strong Case

To ensure a complaint is not summarily dismissed for lack of substance, complainants must systematically preserve all digital evidence:

Transaction Documentation: Digital loan contracts, Truth in Lending disclosure statements, transaction histories showing fees deducted upfront, and payment receipts.
Communications Log: Unedited screenshots of text messages, Viber/WhatsApp chats, Facebook posts, or comments where online shaming occurred. Ensure the phone numbers, sender IDs, and profile URLs are fully visible.
Call Logs and Audio Metadata: Call history logs proving contact was made during prohibited hours (e.g., 2:00 AM). If calls were legally recorded, preserve the unedited audio files.
Third-Party Affidavits: Written, signed statements from friends, relatives, or employers who were contacted by the lender without their consent, accompanied by screenshots of the messages they received.

IV. Strategic Protection Measures

If you find yourself targeted by predatory lenders executing cyber-harassment campaigns, take the following immediate steps:

Audit Permissions: Go into your smartphone's settings and immediately revoke the lending application's permission to access your contacts, camera, files, and location.
Secure Social Media Accounts: Restrict your social media privacy settings to prevent non-friends from viewing your friend list, tagging you, or leaving comments on your posts.
Verify Licensing Status: Cross-reference the lending app against the SEC’s active public registry of registered lending and financing companies holding a valid Certificate of Authority. If they are unregistered, they are operating outside the regulatory fringe, escalating the matter to an outright criminal venture under the jurisdiction of the PNP and NBI.

Legal Advisory: Debt is purely a civil obligation. Section 20, Article III of the 1987 Philippine Constitution explicitly states that "no person shall be imprisoned for debt." While legitimate lenders retain the lawful right to file collection suits in regular courts, they possess no legal authority to deploy criminal harassment, defame character, or bypass statutory interest caps.