A complaint is not an FOI request: where PH online-loan issues actually go

A borrower can reach the right government agency and still enter through the wrong door. In May 2026, a borrower used the National Privacy Commission’s public eFOI portal to try to file a complaint about alleged online-loan harassment, threats and contact with relatives. The NPC later explained that the submission was not a valid FOI request: FOI is for access to government information, while a privacy complaint follows the NPC’s complaint process.

A separate April 2026 record at the Cybercrime Investigation and Coordinating Center shows the same procedural problem. The requester described alleged data-privacy violations, debt-collection conduct and cyber-enabled fraud. CICC said those were complaint-based matters rather than an FOI request and forwarded the submission to its Cybercrime Complaint Center. That forwarding did not decide whether the allegations were true or whether the complaint would succeed.

Start with the problem, not the agency name

For complaints where the respondent is a registered lending or financing company holding an SEC Certificate of Authority, the SEC’s current page directs filings through the SEC iMessage portal. The page says complaints against persons or companies engaging in lending without such a Certificate of Authority should instead be sent to the SEC Enforcement and Investor Protection Department. For complaints within the FINLEND route, the SEC asks complainants to attach supporting evidence, file one complaint per respondent company, and show that they first tried the company’s own remedies. The same page says data-privacy or unauthorized-contact-access issues may be referred to the National Privacy Commission. It also makes an important limit clear: the SEC complaint process does not itself cancel or settle a borrower’s loan obligation.

Privacy complaints follow a different process. The NPC says a complainant may file a notarized complaint-assisted form or a verified complaint with supporting evidence through the submission methods it accepts. That is different from posting the story in a public FOI thread. The NPC itself warns eFOI users not to disclose sensitive personal information on the public request page.

Cyber-enabled fraud creates another branch. The CICC example above shows that a fraud or cybercrime complaint submitted through eFOI may be redirected to the complaint center instead of being handled as an information request. The correct route can depend on what actually happened, so a borrower should not treat an FOI tracking status as the status of a criminal, privacy or lending complaint.

A routed request is not a resolved complaint

This distinction matters when reading public records. Denied, partially successful, or successful on an FOI page describes what happened to the information request. It does not prove that a lender violated a rule, that a cybercrime investigation found an offender, or that a borrower’s account was corrected. A referral is a handoff, not an outcome.

For BorrowTalk, the useful checkpoint is therefore not only “which agency?” but “which process did the borrower actually enter?” Keep the company ticket, complaint reference, evidence submitted, agency acknowledgement and any later decision as separate records. Avoid putting full account numbers, IDs, OTPs, contact lists or unrelated screenshots into public threads.