Last regulatory review: September 2026. This guide reflects publicly available Philippine regulatory guidance reviewed as of this date. Users should independently verify the latest SEC, NPC, BSP, and other applicable regulatory information before making financial decisions.

1. Identifying Unauthorized Lending Apps

Knowing how to spot potentially unauthorized lending apps in the Philippines can help protect your finances and personal data. Unauthorized lending platforms may operate without the registration, authority, or regulatory requirements applicable to their business. Lending and financing companies are generally regulated by the SEC, while banks and other BSP-supervised financial institutions fall under BSP oversight.

Before applying, identify the legal company operating the platform and independently verify its SEC registration, applicable Certificate of Authority (CA), and relationship with the online lending platform. Do not rely solely on a CA number displayed in an app or website. For a borrower-facing checklist, see Legit Online Loan App: How to Verify.

Read Also: Fake Loan Apps: What Are They and How Can You Spot Them?

2. Red Flags to Watch For

Review the app carefully before submitting personal information or accepting a loan.

Unclear loan costs

Borrowers are statutorily entitled under Republic Act No. 3765 (Truth in Lending Act) to a written Disclosure Statement detailing all loan costs, fees, interest rates, and repayment terms prior to loan consummation.

Unnecessary permissions: Review requested app permissions carefully. Personal-data processing should be necessary, proportionate, and limited to a clearly stated legitimate purpose under National Privacy Commission (NPC) guidelines..

Unverifiable company information: Be cautious when the legal operator, regulatory information, or relationship between the company and the app cannot be independently verified.

Harassment or intimidation

Harassment, intimidation, public shaming, or accessing phone contact lists for debt collection violates SEC Memorandum Circular No. 18 (s. 2019) on Unfair Collection Practices and the Data Privacy Act of 2012.

3. How to Report Suspected Illegal Lending Apps

If you experience suspected harassment, fraud, or misuse of personal data, preserve screenshots, loan agreements, payment records, and messages before taking further action. Review and revoke unnecessary app permissions where appropriate. MabilisCash also publishes an official Anti-Fraud guide for borrowers who encounter suspicious offers or impersonation attempts.

Complaints involving lending or financing companies, online lending apps or platforms, and their collection agencies are generally directed to the SEC. Privacy or personal-data concerns may be filed with the NPC. Contact the BSP when the provider is a BSP-supervised financial institution. Suspected scams, threats, or criminal activity may also be reported to the PNP Anti-Cybercrime Group (PNP-ACG), NBI Cybercrime Division, or CICC.

Read Also: SEC Advisories and Notices

4. Legitimate vs. Potentially Unauthorized Apps

Feature

Legitimate Platform

Potentially Unauthorized Platform

Regulatory verification

Operating company, applicable SEC authority, and platform relationship can be independently verified

Company identity, authority, or platform relationship cannot be independently verified

Loan disclosures

Relevant costs, fees, and repayment terms are disclosed

Costs or repayment terms are unclear or incomplete

App permissions

Data processing is necessary, proportionate, disclosed, and tied to a legitimate purpose

Permissions appear unnecessary, excessive, disproportionate, or unrelated to the stated purpose

Contact or gallery access alone should not be treated as proof that an app is illegal.

5. Frequently Asked Questions

What should I do if I suspect a loan app is unauthorized?

Preserve your loan agreement, payment records, screenshots, and messages. Do not send money to an unverified person or account. Verify the creditor and official payment channel, then report suspected misconduct to the appropriate authority. Reporting an app does not automatically cancel a valid financial obligation.

How can I verify a lender with the SEC?

Identify the legal company operating the app, verify its SEC registration and applicable authority, check whether the online lending platform is recorded or associated with that company, and review current SEC suspension or revocation information.

Can a lender contact people in my contact list?

No. Under relevant NPC circulars, accessing or harvesting a borrower’s contact list for debt collection or contacting third parties without their express consent is strictly prohibited and illegal.

Read Also: How to Protect Yourself Against Fraud and Scams

6. Conclusion

Before using an online loan app, verify the legal operator and applicable regulatory information. Review loan disclosures, privacy notices, app permissions, payment channels, and collection practices. If something appears unauthorized or improper, preserve evidence and report the concern to the appropriate authority.

7. References

SEC – Lending and Financing Companies

SEC – Advisories and Notices

Republic Act No. 3765 – Truth in Lending Act

2026 DICT–NPC–SEC Public Advisory on Online Lending Platforms