The proliferation of Online Lending Applications (OLAs) has led to a surge in predatory practices, ranging from exorbitant interest rates to severe harassment and unauthorized use of personal data. Under Philippine law, these actions are not just unethical; they are illegal. Victims have several legal avenues for redress depending on the nature of the violation.
1. National Privacy Commission (NPC)
Focus: Data Privacy Violations
If an OLA accesses your contact list without consent, posts your photos on social media to shame you, or messages your friends and family, they are in violation of Republic Act No. 10173, also known as the Data Privacy Act of 2012.
- Violations Covered: Unauthorized processing of personal information, processing for purposes not compatible with the declared intent, and malicious disclosure.
- How to Report: You can file a formal complaint through the NPC’s official website or via email at
complaints@privacy.gov.ph. - Evidence Needed: Screenshots of the app’s permissions, logs of messages sent to your contacts, and social media posts made by the OLA agents.
2. Securities and Exchange Commission (SEC)
Focus: Unfair Debt Collection Practices and Illegal Operations
The SEC regulates financing and lending companies. Under SEC Memorandum Circular No. 18 (Series of 2019), lending companies are prohibited from using unfair debt collection practices.
Prohibited Acts:
Using threats of violence or other criminal means to harm a person’s reputation or property.
Using profane or abusive language.
Disclosing or publishing the names of borrowers who allegedly refuse to pay debts.
Contacting persons in the borrower’s contact list other than those named as guarantors or co-makers.
How to Report: Use the SEC i-Message portal or email the Corporate Governance and Finance Department at
cgfd_enforcement@sec.gov.ph.Requirement: Verify if the OLA is registered. If they are not registered, they are operating illegally, which is a separate criminal offense.
3. Bangko Sentral ng Pilipinas (BSP)
Focus: Consumer Protection
If the OLA is operated by a bank or a subsidiary of a bank, the BSP has jurisdiction under the Financial Products and Services Consumer Protection Act (Republic Act No. 11765).
- Role: The BSP ensures that financial service providers adhere to "Conduct of Business" standards, which include fair treatment and protection of client data.
- How to Report: You can use the BSP’s chatbot, "BOB" (BSP Online Buddy), on their website or Facebook page, or email
consumeraffairs@bsp.gov.ph.
4. PNP Anti-Cybercrime Group (PNP-ACG) & NBI Cybercrime Division
Focus: Criminal Harassment and Cyber-Libel
When the harassment escalates to grave threats, cyber-shaming, or defamation, it becomes a criminal matter under the Cybercrime Prevention Act of 2012 (Republic Act No. 10175).
Violations Covered: Cyber-libel, identity theft, and unjust vexation.
How to Report:
PNP-ACG: Visit their headquarters at Camp Crame or report via their Facebook page ("PNP Anti-Cybercrime Group").
NBI-CCD: File a complaint at the NBI Cybercrime Division office or through the NBI website.
Action: These agencies can conduct forensic investigations to trace the individuals behind the messages and social media accounts.
Summary of Relevant Laws
| Law / Regulation | Key Protection | Primary Agency |
|---|---|---|
| R.A. 10173 (Data Privacy Act) | Protects against unauthorized access to contacts and personal data. | NPC |
| SEC M.C. No. 18 | Prohibits harassment, shaming, and abusive language. | SEC |
| R.A. 10175 (Cybercrime Law) | Penalizes cyber-libel, threats, and online harassment. | PNP-ACG / NBI |
| R.A. 11765 (FCPA) | Protects financial consumers from unfair business practices. | BSP / SEC |
Practical Steps for Victims
- Document Everything: Take screenshots of all threatening texts, emails, and social media posts. Do not delete the message threads, as these serve as digital evidence.
- Cease Communication: Avoid engaging with harassers. Aggressive replies can sometimes be used against you or may provoke further abuse.
- Adjust Privacy Settings: Lockdown your social media profiles to "Private" and warn your contact list that your data has been compromised by a predatory app.
- Check Registration: Use the SEC website to verify if the lending app has a Certificate of Authority (CA). If they don't, they are a "fly-by-night" operation and are strictly prohibited from lending.