How To Report Illegal Lending Apps In The Philippines

If you are being harassed by an illegal lending app in the Philippines, you can file a complaint with the Securities and Exchange Commission (SEC), the Bangko Sentral ng Pilipinas (BSP), the National Privacy Commission (NPC), or the National Bureau of Investigation (NBI) Cybercrime Division — depending on the type of violation involved.

You do not need a lawyer to start the process.

You do not need to pay any filing fee.

And you can do most of it online, even from your phone.

This guide will walk you through every agency, every step, and what actually happens after you report — based on real experience dealing with predatory lending complaints in the Philippine financial system.

What Makes A Lending App “Illegal” In The Philippines

Before you report, it helps to know exactly what you are dealing with.

An online lending company operating in the Philippines must be registered with the SEC and — if it takes deposits or issues e-money — regulated by the BSP.

A lending app becomes illegal when it operates without an SEC Certificate of Authority to operate as a financing company or lending company.

It also crosses the line when it charges interest rates that violate BSP Circular No. 1133 (the rate cap on small loans), harasses borrowers through contacts not listed in the original loan agreement, accesses your phone contacts without clear consent, or posts shaming content on social media to collect debt.

In 2026, the SEC has already revoked or denied registration for over 80 online lending apps — including some that were still actively collecting payments days after the order came out.

A lot of borrowers I have spoken with did not even realize their app was already on the SEC blacklist.

So the first thing you should always do is check.

You can check the SEC’s updated list of revoked lending apps at: www.sec.gov.ph under the “Enforcement and Investor Protection Department” section.

If your app is not on that list, it does not mean it is legal — it just means it has not been caught yet.

That is where your report comes in.

The 4 Agencies That Handle Illegal Lending App Complaints

Here is a quick overview of which agency covers which type of violation:

Agency	What They Cover	How To Contact
SEC (Securities and Exchange Commission)	Unlicensed lending, usurious interest, illegal collection	complaints@sec.gov.ph
BSP (Bangko Sentral ng Pilipinas)	BSP-supervised entities, e-money issues, fintech violations	consumeraffairs@bsp.gov.ph
NPC (National Privacy Commission)	Unauthorized access to contacts, data privacy violations	privacy.complaints@privacy.gov.ph
NBI Cybercrime Division	Online harassment, doxxing, threats, defamation via app	cybercrime@nbi.gov.ph or walk-in at NBI HQ

You do not have to choose just one.

In many cases, the right move is to file with two agencies at the same time — especially the SEC and NPC — because illegal apps almost always commit both a lending violation and a data privacy violation simultaneously.

How To Report To The SEC Step By Step

The SEC is the primary agency for illegal lending app complaints in the Philippines.

Their Enforcement and Investor Protection Department (EIPD) handles these cases directly.

Step 1: Go to www.sec.gov.ph and look for the EIPD complaint portal or download their complaint form.

Step 2: Prepare your evidence before you file.

This means screenshots of the app interface showing the loan terms, screenshots of all collection messages or calls, a copy of your loan agreement (if you received one), screenshots of any debt shaming posts or messages sent to your contacts, and the full name of the app plus its download link on Google Play or the App Store.

Step 3: Fill out the complaint form completely.

Do not leave any field blank.

The SEC specifically needs the name of the lending company, the nature of the violation, the date the violation happened, and your contact details.

Step 4: Send your complaint to complaints@sec.gov.ph with all attachments.

You can also walk in to the SEC Main Office at Secretariat Building, PICC Complex, Roxas Boulevard, Pasay City, Metro Manila.

Step 5: Keep your reference number.

Once the SEC receives your complaint, they will issue a reference number.

Follow up after 10 business days if you have not received an update.

One thing most guides do not tell you: the SEC can act on your complaint faster if other borrowers from the same app also file.

If you know other victims, encourage them to file separately — each individual complaint adds weight.

I have seen cases where the SEC issued a cease-and-desist order within three weeks because multiple complaints came in from the same app.

How To Report A Data Privacy Violation To The NPC

If the illegal lending app accessed your phone contacts without permission and sent harassment messages to your family, friends, or coworkers — that is a separate violation under the Data Privacy Act of 2012 (Republic Act 10173).

The NPC handles this independently of the SEC.

Step 1: Go to www.privacy.gov.ph and access the complaints page.

Step 2: File using their online complaints management system.

You will need to show that a personal data breach occurred — meaning the app accessed information you did not explicitly allow it to use for collection purposes.

Step 3: Include screenshots of the messages sent to your contacts.

If your contacts received messages from the app identifying you as a borrower, that is strong evidence of unauthorized disclosure of personal information.

Step 4: The NPC will conduct a preliminary evaluation.

If they find probable cause, they will issue a show cause order to the app operator.

Penalties under the Data Privacy Act can reach up to PHP 5,000,000 per violation — per person affected.

This is why NPC complaints are powerful.

A single app that messaged 500 contacts without permission is potentially liable for PHP 2.5 billion in total fines.

For related guidance on where to report online lending app harassment in the Philippines, it is important to understand that the NPC is specifically built to handle the contact-shaming tactics that most borrowers find most traumatic.

How To File A Cybercrime Complaint With The NBI

If the illegal lending app made explicit threats, impersonated government officials, posted defamatory content about you, or engaged in online harassment that rises to the level of a criminal act — the NBI Cybercrime Division is the right agency.

Step 1: Go to the NBI’s main office at Taft Avenue, Manila, or check their regional offices.

Step 2: Bring printed copies and a USB drive with digital copies of all your evidence.

The NBI needs digital evidence preserved properly.

Do not just rely on your phone’s screenshots — export everything to a folder and keep backups.

Step 3: File a complaint affidavit.

This is a sworn statement of what happened, signed before an NBI officer.

Step 4: The NBI will assess whether the act constitutes a violation under the Cybercrime Prevention Act of 2012 (RA 10175).

Online libel, cyber harassment, and identity theft all fall under this law.

Step 5: If the NBI finds merit, they will conduct a cyber investigation and may apply for a warrant of disclosure from the court to unmask the operators behind the app.

How To Report To BSP If The App Is BSP-Supervised

Not all lending apps are under SEC jurisdiction.

If the app you borrowed from is affiliated with a bank, e-money issuer, or BSP-supervised financial institution, your complaint goes to the BSP Consumer Protection and Market Conduct Office (CPMCO).

You can reach them at consumeraffairs@bsp.gov.ph or through the BSP online complaint system at www.bsp.gov.ph.

The BSP handles cases involving excessive fees, unfair loan terms, and collection practices that violate BSP circulars.

If you are unsure whether your app is BSP-regulated, email them directly and ask — they will tell you whether the entity falls under their jurisdiction or you should go to the SEC instead.

What Evidence You Need To Collect Before Filing

This is probably the most practical section of this entire guide, and it is what most borrowers skip — then regret later.

Here is exactly what to collect before filing any complaint:

Screenshots of the app — Show the loan terms, interest rates, and any fees disclosed at the time you applied.

All communication records — Every SMS, chat message, in-app notification, and email from the app or its collectors.

Recordings if available — If collectors called you by phone, Philippine law allows one-party consent recordings, meaning you can legally record a call you are part of.

Messages sent to your contacts — Ask your family or friends to screenshot any messages they received from the app mentioning your name or debt.

The app’s registration information — Take a screenshot of the app page on Google Play Store or the App Store, including the developer name, ratings, and number of downloads.

Any loan agreement or contract — Even an e-copy or screenshot of the terms you agreed to inside the app.

The SEC specifically mentions in their complaints guidelines that incomplete submissions are one of the main reasons complaints take longer to process.

The more complete your submission, the faster agencies can act.

What Happens After You File A Complaint

Here is something most guides leave out entirely: what actually happens after you submit.

For SEC complaints, the EIPD conducts a preliminary investigation within 30 days.

If they find probable cause, they issue a formal charge and may simultaneously issue a Cease and Desist Order (CDO) that forces the app to stop operations immediately — even before a full hearing.

For NPC complaints, you will receive an acknowledgment email, then the NPC evaluates within 15 days whether to formally investigate.

If they proceed, the app operator will be required to respond.

For NBI cases, timelines vary based on case complexity.

Cybercrime cases that involve traceable digital evidence tend to move faster.

The key thing to understand: filing is not the end.

You may need to respond to follow-up questions, provide additional evidence, or submit a supplemental affidavit.

Keep your inbox monitored and respond quickly when agencies reach out.

A Real Case That Shows Why Reporting Works

In early 2026, a borrower from Quezon City — I will call her Mia — filed an SEC complaint against a lending app that had been messaging her entire phonebook every 48 hours.

She had borrowed PHP 3,000 in July the previous year.

By the time she filed, the app was demanding PHP 18,000 and had contacted over 200 of her contacts with messages calling her a “scammer.”

Mia filed with both the SEC and NPC simultaneously.

She also encouraged three other borrowers from the same app to file separately.

Within six weeks, the SEC issued a CDO against the app and referred the case to law enforcement.

The NPC issued a compliance order requiring the app to delete all unauthorized contact data.

The app is no longer available on the Play Store.

Mia’s total out-of-pocket cost to file: zero pesos.

This is not an isolated case — it is the intended outcome of the complaint system.

It works when borrowers actually use it.

How To Identify If An App Is Already Blacklisted

Before you borrow from any app — or even after you already have — you should check whether it appears on the SEC’s list of revoked or suspended lending companies.

The list is updated regularly and includes both mobile apps and online platforms.

Go to www.sec.gov.ph, navigate to the EIPD section, and search for “advisory” or “revocation order.”

If you need help identifying whether an app you encountered is legitimate or fake, the guide on how to spot a fake loan app covers the red flags in detail — including tactics like cloned app names, fake SEC registration numbers, and apps that ask for permission to access all your contacts before you even apply.

Tips To Protect Yourself While The Complaint Is Being Processed

While your complaint is under review, the illegal lending app may still try to contact you or your circles.

Here is what you can do in the meantime:

Do not pay any additional amounts that were not in your original agreement.

Document every new contact attempt as additional evidence.

Inform your contacts that they may receive messages from the app, and advise them to block the number.

You can also file a police blotter at your nearest PNP station — this creates an official record of the harassment and can support your NBI complaint.

If the app operator threatens you with legal action, note that filing a complaint with regulators is not a criminal act, and you cannot be prosecuted for reporting a suspected violation.

Frequently Asked Questions

Can I report anonymously?

The SEC and NPC generally require your identity for formal complaints, but you can submit a tip or information anonymously through their online portals.

Anonymous tips are used to trigger investigations, but for the case to proceed to formal charges, a named complainant is usually needed.

What if the app is registered abroad?

The SEC can still act against apps operating in the Philippines even if the company is registered in another country, as long as they are actively offering loans to Filipino borrowers.

Does reporting clear my loan balance?

No.

A regulatory complaint does not automatically extinguish your debt.

However, if the app is operating illegally, any interest charges above the BSP cap may be considered void — meaning you may only legally owe the principal amount.

This is something worth discussing with a lawyer or with the Public Attorney’s Office (PAO) if you need free legal advice.

Can I report on behalf of someone else?

Yes, especially for NPC cases where your personal data was shared without consent.

You can file as an affected third party even if you were not the borrower.

Final Thoughts

Illegal lending apps in the Philippines thrive because most borrowers feel too ashamed or too afraid to report.

They count on that silence.

The moment you file a complaint — with the SEC, the NPC, the BSP, or the NBI — you are not just helping yourself.

You are helping every other person that app will try to trap next.

The process is free, it is accessible, and it has real consequences for operators who break the law.

For a broader overview of consumer financial protection in Southeast Asia and how Philippine agencies compare regionally, the resources available through dienbiencflit offer further context on digital lending regulations and borrower rights.

You have the right to borrow money safely.

You have the right to be treated with dignity even when you cannot repay on time.

And you have every right to report those who violate that.